4$nfc_llcp(r7, &(0x7f0000000480), &(0x7f0000000500)=0x60, 0x80400)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="7aacf71d", @ANYRES16=r6, @ANYBLOB="100029bd7000fddbdf2508000000050022000100000008000c000200000008001900ac1414aa0500140006000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x84)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r4, 0x9a62f000)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)
r9 = socket(0x14, 0x1, 0x1)
accept$nfc_llcp(r9, 0x0, &(0x7f0000000680))
sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0xb5212281025f468d}, 0x4000084)

15:39:33 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x2e}}}, 0x30)

15:39:33 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x14, 0x1, 0x1)

15:39:33 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = socket(0x22, 0x5, 0xfffffff9)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000000)=0x3, 0x4)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:33 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
socket(0x14, 0x1, 0x1)

15:39:33 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x8010, 0xffffffffffffffff, 0x0)
r4 = socket(0x8, 0x5, 0xdb)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000006c0)=@gcm_256={{0x304}, "11ba54585d54cd1a", "28ad7578ff24945be92b987e469403f0092b1b704c91cf3ae2d25d1a5cf188b8", "5be4fbde", "be1b391cccc24be8"}, 0x38)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
accept4$nfc_llcp(r6, &(0x7f0000000480), &(0x7f0000000500)=0x60, 0x80400)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="7aacf71d", @ANYRES16=r5, @ANYBLOB="100029bd7000fddbdf2508000000050022000100000008000c000200000008001900ac1414aa0500140006000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x84)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r3, 0x9a62f000)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)
r8 = socket(0x14, 0x1, 0x1)
accept$nfc_llcp(r8, 0x0, &(0x7f0000000680))

15:39:33 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20) (async)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r4, r5}}, 0x18) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:33 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
r1 = socket(0x22, 0x5, 0xfffffff9)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000000)=0x3, 0x4)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:33 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x13, r2, 0x6)
mmap$snddsp_control(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x83000000)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x3, r3, 0x1c, 0x1, @in={0x2, 0x4e21, @multicast2}}}, 0xa0)

15:39:33 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x2e}}}, 0x30)

15:39:33 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280), 0x80)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
socket(0x14, 0x1, 0x1)

15:39:33 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x8010, 0xffffffffffffffff, 0x0)
r4 = socket(0x8, 0x5, 0xdb)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000006c0)=@gcm_256={{0x304}, "11ba54585d54cd1a", "28ad7578ff24945be92b987e469403f0092b1b704c91cf3ae2d25d1a5cf188b8", "5be4fbde", "be1b391cccc24be8"}, 0x38)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
accept4$nfc_llcp(r6, &(0x7f0000000480), &(0x7f0000000500)=0x60, 0x80400)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="7aacf71d", @ANYRES16=r5, @ANYBLOB="100029bd7000fddbdf2508000000050022000100000008000c000200000008001900ac1414aa0500140006000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x84)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r3, 0x9a62f000)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)
socket(0x14, 0x1, 0x1)

15:39:33 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = socket(0x22, 0x5, 0xfffffff9)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000000)=0x3, 0x4)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
socket(0x22, 0x5, 0xfffffff9) (async)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000000)=0x3, 0x4) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)

15:39:33 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x8010, 0xffffffffffffffff, 0x0)
r4 = socket(0x8, 0x5, 0xdb)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000006c0)=@gcm_256={{0x304}, "11ba54585d54cd1a", "28ad7578ff24945be92b987e469403f0092b1b704c91cf3ae2d25d1a5cf188b8", "5be4fbde", "be1b391cccc24be8"}, 0x38)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
accept4$nfc_llcp(r6, &(0x7f0000000480), &(0x7f0000000500)=0x60, 0x80400)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="7aacf71d", @ANYRES16=r5, @ANYBLOB="100029bd7000fddbdf2508000000050022000100000008000c000200000008001900ac1414aa0500140006000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x84)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r3, 0x9a62f000)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)

15:39:33 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280), 0x80)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
socket(0x14, 0x1, 0x1)

15:39:33 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x13, r2, 0x6)
mmap$snddsp_control(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x83000000)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x3, r3, 0x1c, 0x1, @in={0x2, 0x4e21, @multicast2}}}, 0xa0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x13, r2, 0x6) (async)
mmap$snddsp_control(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x83000000) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x3, r3, 0x1c, 0x1, @in={0x2, 0x4e21, @multicast2}}}, 0xa0) (async)

15:39:33 executing program 5:
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, <r0=>0x0})
ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000040)={r0})
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0x58, &(0x7f0000000080)={0x0}}, 0x0)

15:39:33 executing program 1:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x8010, 0xffffffffffffffff, 0x0)
r4 = socket(0x8, 0x5, 0xdb)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000006c0)=@gcm_256={{0x304}, "11ba54585d54cd1a", "28ad7578ff24945be92b987e469403f0092b1b704c91cf3ae2d25d1a5cf188b8", "5be4fbde", "be1b391cccc24be8"}, 0x38)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
accept4$nfc_llcp(r6, &(0x7f0000000480), &(0x7f0000000500)=0x60, 0x80400)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="7aacf71d", @ANYRES16=r5, @ANYBLOB="100029bd7000fddbdf2508000000050022000100000008000c000200000008001900ac1414aa0500140006000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x84)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r3, 0x9a62f000)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)
socket(0x14, 0x1, 0x1)

15:39:33 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20) (async)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r4, r5}}, 0x18) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:33 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280), 0x80)
socket(0x14, 0x1, 0x1)

15:39:33 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x8010, 0xffffffffffffffff, 0x0)
r4 = socket(0x8, 0x5, 0xdb)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000006c0)=@gcm_256={{0x304}, "11ba54585d54cd1a", "28ad7578ff24945be92b987e469403f0092b1b704c91cf3ae2d25d1a5cf188b8", "5be4fbde", "be1b391cccc24be8"}, 0x38)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
accept4$nfc_llcp(r6, &(0x7f0000000480), &(0x7f0000000500)=0x60, 0x80400)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="7aacf71d", @ANYRES16=r5, @ANYBLOB="100029bd7000fddbdf2508000000050022000100000008000c000200000008001900ac1414aa0500140006000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x84)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r3, 0x9a62f000)

15:39:33 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x8010, 0xffffffffffffffff, 0x0)
r4 = socket(0x8, 0x5, 0xdb)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000006c0)=@gcm_256={{0x304}, "11ba54585d54cd1a", "28ad7578ff24945be92b987e469403f0092b1b704c91cf3ae2d25d1a5cf188b8", "5be4fbde", "be1b391cccc24be8"}, 0x38)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
accept4$nfc_llcp(r5, &(0x7f0000000480), &(0x7f0000000500)=0x60, 0x80400)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r3, 0x9a62f000)

15:39:33 executing program 1:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x8010, 0xffffffffffffffff, 0x0)
r4 = socket(0x8, 0x5, 0xdb)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000006c0)=@gcm_256={{0x304}, "11ba54585d54cd1a", "28ad7578ff24945be92b987e469403f0092b1b704c91cf3ae2d25d1a5cf188b8", "5be4fbde", "be1b391cccc24be8"}, 0x38)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
accept4$nfc_llcp(r6, &(0x7f0000000480), &(0x7f0000000500)=0x60, 0x80400)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="7aacf71d", @ANYRES16=r5, @ANYBLOB="100029bd7000fddbdf2508000000050022000100000008000c000200000008001900ac1414aa0500140006000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x84)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r3, 0x9a62f000)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)

15:39:33 executing program 5:
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, <r0=>0x0})
ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000040)={r0})
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0x58, &(0x7f0000000080)={0x0}}, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)) (async)
ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000040)={r0}) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0x58, &(0x7f0000000080)={0x0}}, 0x0) (async)

15:39:33 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x13, r2, 0x6) (async)
mmap$snddsp_control(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x83000000) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x3, r3, 0x1c, 0x1, @in={0x2, 0x4e21, @multicast2}}}, 0xa0)

15:39:33 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
socket(0x14, 0x1, 0x1)

15:39:33 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x8010, 0xffffffffffffffff, 0x0)
r4 = socket(0x8, 0x5, 0xdb)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000006c0)=@gcm_256={{0x304}, "11ba54585d54cd1a", "28ad7578ff24945be92b987e469403f0092b1b704c91cf3ae2d25d1a5cf188b8", "5be4fbde", "be1b391cccc24be8"}, 0x38)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
accept4$nfc_llcp(r5, &(0x7f0000000480), &(0x7f0000000500)=0x60, 0x80400)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r3, 0x9a62f000)

15:39:33 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
socket(0x14, 0x1, 0x1)

15:39:33 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x2e}}}, 0x30)

15:39:34 executing program 5:
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, <r0=>0x0})
ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000040)={r0}) (async)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0x58, &(0x7f0000000080)={0x0}}, 0x0)

15:39:34 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
write$P9_RATTACH(r1, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x20, 0x0, 0x3}}, 0x14)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:34 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x8010, 0xffffffffffffffff, 0x0)
r4 = socket(0x8, 0x5, 0xdb)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000006c0)=@gcm_256={{0x304}, "11ba54585d54cd1a", "28ad7578ff24945be92b987e469403f0092b1b704c91cf3ae2d25d1a5cf188b8", "5be4fbde", "be1b391cccc24be8"}, 0x38)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r3, 0x9a62f000)

15:39:34 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socket(0x14, 0x1, 0x1)

15:39:34 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
accept$nfc_llcp(r0, &(0x7f0000000000), &(0x7f0000000080)=0x60)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000680)={'team0\x00', <r5=>0x0})
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
syz_genetlink_get_family_id$team(&(0x7f00000005c0), r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=ANY=[@ANYBLOB="1cb4075dcf8f33bfd0ba609be6a0785935c25ce0332d6f36a5dc445625f3dd0411e9f92b4b6d74d50a02", @ANYRES16=r8, @ANYBLOB="010000000000000000000700000008000b0000000000"], 0x1c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000a00)={0x50, r8, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_team\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xffff}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000041}, 0x8000)
write$P9_ROPEN(r6, &(0x7f0000000940)={0x18}, 0x18)
r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80)={r6}, 0x8)
sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x4c, r8, 0x200, 0x70bd2a, 0x401, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x10001}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x942}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xffff}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004001)
r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r10, &(0x7f0000000940)={0x18}, 0x18)
r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x4e22, 0x81, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}}, 0x0, 0x0, 0x7, 0x0, "aecb9c0b34786de5514b522d1db989300ecd066233637984d7ed31ce9ebcd8cd8b2a880342e2d919331542d069b711cb238246621bfc09f44f6fa6127153afa6493a8f26a713df7de26479c1989bf029"}, 0xd8)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x3d2d, 0x2, 0x7f, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x2}, 0x48)
r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8)
pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, <r14=>0xffffffffffffffff}, 0x880)
write$P9_RAUTH(r14, &(0x7f0000000640)={0x14, 0x67, 0x2, {0x8, 0x1, 0x8}}, 0x14)
write$P9_RREAD(r13, &(0x7f00000006c0)={0xee, 0x75, 0x2, {0xe3, "6bac318ce4bf007dbb6230249287062d4733ce84eb3656b7730e6afdffdff476de6fe916a9df3b7784c37030904e13694ceee70911c83e609902487841ef285e11ac05b731d7b86f798469da00851820954984e7cd67a497be87f0bdb3678066c9441ce8853ed88d3b5e8de2c49a7dfee08ec8fa113c897a6cebb6bb66e54ae8a5927a12378de99576a43383eb8ea78b057d141b004745eb8f280a2a440f7d9015d88f3061c41501fa1df0a64cfddcadcab10782e3c92523f468b3cd089bc7b4885f7c2d7483d47b4f4f9826d2339603e032c2a5557bd12cce39e0e5280c01fb2fdfa5"}}, 0xee)
r15 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x10, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x8, 0x1, 0x0, r11}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xce8}, @generic={0x22, 0x1, 0xc, 0x80, 0x7}, @call={0x85, 0x0, 0x0, 0xaf}, @ldst={0x1, 0x1, 0x0, 0x7, 0x8, 0xfffffffffffffff4, 0x10}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ldst={0x2, 0x1, 0x1, 0x4, 0x6, 0x3e59fceec7d136a6}, @call={0x85, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xe86}]}, &(0x7f0000000140)='GPL\x00', 0xc0, 0xa6, &(0x7f0000000380)=""/166, 0xe8355f5654d925e7, 0x2, '\x00', r5, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xf, 0x7fff, 0x9}, 0x10, 0x0, r11, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, r10, r11, 0x1, r12, r13, 0xffffffffffffffff, r15, r6]}, 0x80)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:34 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="60b10000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fddbdf250700000008000c0004000000140008006261746164765f736c6176655f300000050022000100000008001900e0000002050007000300000008001900e000000105000500010000000800110000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0xc800)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000240)=@gcm_256={{0x303}, "32bdc783078d43d2", "7b648be3e24aff2d11f64177077edb9fb53f98141976a10644e6346081a92939", "2aaabbfa", "293395f3677df795"}, 0x38)
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000000)={0x0, 0x2, 0x0, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0), 0x58, 0x0, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f00000001c0)})
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000740), &(0x7f0000000780)=0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x800)

15:39:34 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
write$P9_RATTACH(r1, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x20, 0x0, 0x3}}, 0x14)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
write$P9_RATTACH(r1, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x20, 0x0, 0x3}}, 0x14) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) (async)

15:39:34 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x8010, 0xffffffffffffffff, 0x0)
r4 = socket(0x8, 0x5, 0xdb)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000006c0)=@gcm_256={{0x304}, "11ba54585d54cd1a", "28ad7578ff24945be92b987e469403f0092b1b704c91cf3ae2d25d1a5cf188b8", "5be4fbde", "be1b391cccc24be8"}, 0x38)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r3, 0x9a62f000)

15:39:34 executing program 4:
socket(0x14, 0x1, 0x1)

15:39:34 executing program 1:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
socket(0x14, 0x1, 0x1)

15:39:34 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="60b10000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fddbdf250700000008000c0004000000140008006261746164765f736c6176655f300000050022000100000008001900e0000002050007000300000008001900e000000105000500010000000800110000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0xc800) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000240)=@gcm_256={{0x303}, "32bdc783078d43d2", "7b648be3e24aff2d11f64177077edb9fb53f98141976a10644e6346081a92939", "2aaabbfa", "293395f3677df795"}, 0x38)
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000000)={0x0, 0x2, 0x0, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0), 0x58, 0x0, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f00000001c0)}) (async)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000740), &(0x7f0000000780)=0x14) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x800)

15:39:34 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x8010, 0xffffffffffffffff, 0x0)
r4 = socket(0x8, 0x5, 0xdb)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000006c0)=@gcm_256={{0x304}, "11ba54585d54cd1a", "28ad7578ff24945be92b987e469403f0092b1b704c91cf3ae2d25d1a5cf188b8", "5be4fbde", "be1b391cccc24be8"}, 0x38)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r3, 0x9a62f000)

15:39:34 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
accept$nfc_llcp(r0, &(0x7f0000000000), &(0x7f0000000080)=0x60)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000680)={'team0\x00', <r5=>0x0}) (async)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
syz_genetlink_get_family_id$team(&(0x7f00000005c0), r6) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=ANY=[@ANYBLOB="1cb4075dcf8f33bfd0ba609be6a0785935c25ce0332d6f36a5dc445625f3dd0411e9f92b4b6d74d50a02", @ANYRES16=r8, @ANYBLOB="010000000000000000000700000008000b0000000000"], 0x1c}}, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000a00)={0x50, r8, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_team\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xffff}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000041}, 0x8000) (async)
write$P9_ROPEN(r6, &(0x7f0000000940)={0x18}, 0x18)
r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80)={r6}, 0x8)
sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x4c, r8, 0x200, 0x70bd2a, 0x401, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x10001}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x942}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xffff}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004001) (async)
r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r10, &(0x7f0000000940)={0x18}, 0x18) (async)
r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x4e22, 0x81, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}}, 0x0, 0x0, 0x7, 0x0, "aecb9c0b34786de5514b522d1db989300ecd066233637984d7ed31ce9ebcd8cd8b2a880342e2d919331542d069b711cb238246621bfc09f44f6fa6127153afa6493a8f26a713df7de26479c1989bf029"}, 0xd8)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x3d2d, 0x2, 0x7f, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x2}, 0x48) (async)
r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8)
pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, <r14=>0xffffffffffffffff}, 0x880)
write$P9_RAUTH(r14, &(0x7f0000000640)={0x14, 0x67, 0x2, {0x8, 0x1, 0x8}}, 0x14)
write$P9_RREAD(r13, &(0x7f00000006c0)={0xee, 0x75, 0x2, {0xe3, "6bac318ce4bf007dbb6230249287062d4733ce84eb3656b7730e6afdffdff476de6fe916a9df3b7784c37030904e13694ceee70911c83e609902487841ef285e11ac05b731d7b86f798469da00851820954984e7cd67a497be87f0bdb3678066c9441ce8853ed88d3b5e8de2c49a7dfee08ec8fa113c897a6cebb6bb66e54ae8a5927a12378de99576a43383eb8ea78b057d141b004745eb8f280a2a440f7d9015d88f3061c41501fa1df0a64cfddcadcab10782e3c92523f468b3cd089bc7b4885f7c2d7483d47b4f4f9826d2339603e032c2a5557bd12cce39e0e5280c01fb2fdfa5"}}, 0xee) (async)
r15 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x10, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x8, 0x1, 0x0, r11}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xce8}, @generic={0x22, 0x1, 0xc, 0x80, 0x7}, @call={0x85, 0x0, 0x0, 0xaf}, @ldst={0x1, 0x1, 0x0, 0x7, 0x8, 0xfffffffffffffff4, 0x10}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ldst={0x2, 0x1, 0x1, 0x4, 0x6, 0x3e59fceec7d136a6}, @call={0x85, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xe86}]}, &(0x7f0000000140)='GPL\x00', 0xc0, 0xa6, &(0x7f0000000380)=""/166, 0xe8355f5654d925e7, 0x2, '\x00', r5, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xf, 0x7fff, 0x9}, 0x10, 0x0, r11, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, r10, r11, 0x1, r12, r13, 0xffffffffffffffff, r15, r6]}, 0x80)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:34 executing program 4:
socket(0x0, 0x1, 0x1)

15:39:34 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async, rerun: 64)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (rerun: 64)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="60b10000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fddbdf250700000008000c0004000000140008006261746164765f736c6176655f300000050022000100000008001900e0000002050007000300000008001900e000000105000500010000000800110000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0xc800)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000240)=@gcm_256={{0x303}, "32bdc783078d43d2", "7b648be3e24aff2d11f64177077edb9fb53f98141976a10644e6346081a92939", "2aaabbfa", "293395f3677df795"}, 0x38) (async)
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000000)={0x0, 0x2, 0x0, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0), 0x58, 0x0, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f00000001c0)}) (async, rerun: 32)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000740), &(0x7f0000000780)=0x14) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 64)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x800)

15:39:34 executing program 1:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x8010, 0xffffffffffffffff, 0x0)
r4 = socket(0x8, 0x5, 0xdb)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000006c0)=@gcm_256={{0x304}, "11ba54585d54cd1a", "28ad7578ff24945be92b987e469403f0092b1b704c91cf3ae2d25d1a5cf188b8", "5be4fbde", "be1b391cccc24be8"}, 0x38)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r3, 0x9a62f000)

15:39:34 executing program 4:
socket(0x0, 0x1, 0x1)

15:39:34 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
write$P9_RATTACH(r1, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x20, 0x0, 0x3}}, 0x14)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
write$P9_RATTACH(r1, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x20, 0x0, 0x3}}, 0x14) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) (async)

15:39:34 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x8010, 0xffffffffffffffff, 0x0)
socket(0x8, 0x5, 0xdb)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r3, 0x9a62f000)

15:39:34 executing program 1:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x8010, 0xffffffffffffffff, 0x0)
r4 = socket(0x8, 0x5, 0xdb)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000006c0)=@gcm_256={{0x304}, "11ba54585d54cd1a", "28ad7578ff24945be92b987e469403f0092b1b704c91cf3ae2d25d1a5cf188b8", "5be4fbde", "be1b391cccc24be8"}, 0x38)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
accept4$nfc_llcp(r5, &(0x7f0000000480), &(0x7f0000000500)=0x60, 0x80400)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r3, 0x9a62f000)

15:39:34 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
accept$nfc_llcp(r0, &(0x7f0000000000), &(0x7f0000000080)=0x60) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000680)={'team0\x00', <r5=>0x0})
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
syz_genetlink_get_family_id$team(&(0x7f00000005c0), r6) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=ANY=[@ANYBLOB="1cb4075dcf8f33bfd0ba609be6a0785935c25ce0332d6f36a5dc445625f3dd0411e9f92b4b6d74d50a02", @ANYRES16=r8, @ANYBLOB="010000000000000000000700000008000b0000000000"], 0x1c}}, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000a00)={0x50, r8, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_team\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xffff}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000041}, 0x8000)
write$P9_ROPEN(r6, &(0x7f0000000940)={0x18}, 0x18) (async)
r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80)={r6}, 0x8)
sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x4c, r8, 0x200, 0x70bd2a, 0x401, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x10001}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x942}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xffff}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004001) (async)
r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r10, &(0x7f0000000940)={0x18}, 0x18)
r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x4e22, 0x81, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}}, 0x0, 0x0, 0x7, 0x0, "aecb9c0b34786de5514b522d1db989300ecd066233637984d7ed31ce9ebcd8cd8b2a880342e2d919331542d069b711cb238246621bfc09f44f6fa6127153afa6493a8f26a713df7de26479c1989bf029"}, 0xd8)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x3d2d, 0x2, 0x7f, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x2}, 0x48) (async)
r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8)
pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, <r14=>0xffffffffffffffff}, 0x880)
write$P9_RAUTH(r14, &(0x7f0000000640)={0x14, 0x67, 0x2, {0x8, 0x1, 0x8}}, 0x14)
write$P9_RREAD(r13, &(0x7f00000006c0)={0xee, 0x75, 0x2, {0xe3, "6bac318ce4bf007dbb6230249287062d4733ce84eb3656b7730e6afdffdff476de6fe916a9df3b7784c37030904e13694ceee70911c83e609902487841ef285e11ac05b731d7b86f798469da00851820954984e7cd67a497be87f0bdb3678066c9441ce8853ed88d3b5e8de2c49a7dfee08ec8fa113c897a6cebb6bb66e54ae8a5927a12378de99576a43383eb8ea78b057d141b004745eb8f280a2a440f7d9015d88f3061c41501fa1df0a64cfddcadcab10782e3c92523f468b3cd089bc7b4885f7c2d7483d47b4f4f9826d2339603e032c2a5557bd12cce39e0e5280c01fb2fdfa5"}}, 0xee) (async)
r15 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x10, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x8, 0x1, 0x0, r11}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xce8}, @generic={0x22, 0x1, 0xc, 0x80, 0x7}, @call={0x85, 0x0, 0x0, 0xaf}, @ldst={0x1, 0x1, 0x0, 0x7, 0x8, 0xfffffffffffffff4, 0x10}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ldst={0x2, 0x1, 0x1, 0x4, 0x6, 0x3e59fceec7d136a6}, @call={0x85, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xe86}]}, &(0x7f0000000140)='GPL\x00', 0xc0, 0xa6, &(0x7f0000000380)=""/166, 0xe8355f5654d925e7, 0x2, '\x00', r5, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xf, 0x7fff, 0x9}, 0x10, 0x0, r11, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, r10, r11, 0x1, r12, r13, 0xffffffffffffffff, r15, r6]}, 0x80)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:34 executing program 4:
socket(0x0, 0x1, 0x1)

15:39:34 executing program 4:
socket(0x14, 0x0, 0x1)

15:39:34 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x8010, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r3, 0x9a62f000)

15:39:34 executing program 1:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x8010, 0xffffffffffffffff, 0x0)
r4 = socket(0x8, 0x5, 0xdb)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000006c0)=@gcm_256={{0x304}, "11ba54585d54cd1a", "28ad7578ff24945be92b987e469403f0092b1b704c91cf3ae2d25d1a5cf188b8", "5be4fbde", "be1b391cccc24be8"}, 0x38)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
accept4$nfc_llcp(r5, &(0x7f0000000480), &(0x7f0000000500)=0x60, 0x80400)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r3, 0x9a62f000)

15:39:34 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1ff}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x48884)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r6}}, 0xc)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:34 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x27)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:34 executing program 4:
socket(0x14, 0x0, 0x0)

15:39:34 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r3, 0x9a62f000)

15:39:34 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r1, 0xd9}}, 0x18)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0x9, r1, 0x0, 0x0, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:34 executing program 1:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x8010, 0xffffffffffffffff, 0x0)
r4 = socket(0x8, 0x5, 0xdb)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000006c0)=@gcm_256={{0x304}, "11ba54585d54cd1a", "28ad7578ff24945be92b987e469403f0092b1b704c91cf3ae2d25d1a5cf188b8", "5be4fbde", "be1b391cccc24be8"}, 0x38)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
accept4$nfc_llcp(r5, &(0x7f0000000480), &(0x7f0000000500)=0x60, 0x80400)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r3, 0x9a62f000)

15:39:34 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x8010, 0xffffffffffffffff, 0x0)
r3 = socket(0x8, 0x5, 0xdb)
setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000006c0)=@gcm_256={{0x304}, "11ba54585d54cd1a", "28ad7578ff24945be92b987e469403f0092b1b704c91cf3ae2d25d1a5cf188b8", "5be4fbde", "be1b391cccc24be8"}, 0x38)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
socket(0x14, 0x1, 0x1)

15:39:34 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1ff}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x48884) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r6}}, 0xc) (async, rerun: 64)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (rerun: 64)

15:39:34 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, 0xffffffffffffffff, 0x9a62f000)

15:39:34 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1ff}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x48884)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r6}}, 0xc)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:34 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x27) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:34 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1ff}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x48884)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r6}}, 0xc)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:34 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, 0xffffffffffffffff, 0x9a62f000)

15:39:34 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x27) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:34 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r1, 0xd9}}, 0x18)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0x9, r1, 0x0, 0x0, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r1, 0xd9}}, 0x18) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0x9, r1, 0x0, 0x0, 0x1}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)

15:39:34 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xde}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x11)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, 0xffffffffffffffff, 0x9a62f000)

15:39:34 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:34 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280), 0x80)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r2, 0x9a62f000)

15:39:34 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1ff}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x48884)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r6}}, 0xc) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:34 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1ff}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x48884)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r6}}, 0xc)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:34 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:34 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280), 0x80)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r1, 0x9a62f000)

15:39:34 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)

15:39:34 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:34 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
pipe2$watch_queue(&(0x7f0000000280), 0x80)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r1, 0x9a62f000)

15:39:34 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:34 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r1, 0xd9}}, 0x18)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0x9, r1, 0x0, 0x0, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r1, 0xd9}}, 0x18) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0x9, r1, 0x0, 0x0, 0x1}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)

15:39:34 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r1, 0x9a62f000)

15:39:34 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x2, 0x4)

15:39:34 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1ff}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x48884)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r6}}, 0xc)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:35 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x1]}, {0x0, 0x0, [0xfffffffd]}], r8, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, r6}}, 0x18)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:35 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:35 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x2, 0x4)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x2, 0x4) (async)

15:39:35 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r1, 0x9a62f000)

15:39:35 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x5}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x2, 0x4)

15:39:35 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:35 executing program 3:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r0, 0x9a62f000)

15:39:35 executing program 4:
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:35 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x2, 0x4)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x2, 0x4) (async)

15:39:35 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:35 executing program 4:
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:35 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x5}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x2, 0x4)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x5}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000080), 0x80) (async)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x2, 0x4) (async)

15:39:35 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x1]}, {0x0, 0x0, [0xfffffffd]}], r8, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, r6}}, 0x18) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x4011, r0, 0x9a62f000)

15:39:35 executing program 4:
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:35 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:35 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
mmap$fb(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0x4, 0x110, 0xffffffffffffffff, 0x82000)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:35 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x5}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x2, 0x4)

15:39:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x9a62f000)

15:39:35 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:35 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
mmap$fb(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0x4, 0x110, 0xffffffffffffffff, 0x82000) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:35 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:35 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x30)

15:39:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x9a62f000)

15:39:35 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x1]}, {0x0, 0x0, [0xfffffffd]}], r8, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, r6}}, 0x18) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:35 executing program 2:
ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x5)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x0, r1, 0x1c, 0x0, @ib={0x1b, 0x9, 0x6, {"c400e2cc1f7d02811b716359cad7c163"}, 0x4, 0x0, 0x80000000}}}, 0xa0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:35 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:35 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
mmap$fb(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0x4, 0x110, 0xffffffffffffffff, 0x82000) (async, rerun: 64)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (rerun: 64)

15:39:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x9a62f000)

15:39:35 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x30)

15:39:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x9a62f000)

15:39:35 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:35 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x30)

15:39:35 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:35 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, 0xffffffffffffffff, 0x9a62f000)

15:39:35 executing program 2:
ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x5)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async, rerun: 64)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (rerun: 64)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x0, r1, 0x1c, 0x0, @ib={0x1b, 0x9, 0x6, {"c400e2cc1f7d02811b716359cad7c163"}, 0x4, 0x0, 0x80000000}}}, 0xa0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async, rerun: 32)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (rerun: 32)

15:39:35 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18, 0x71, 0x0, {{0x0, 0x2}}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:35 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:35 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)

15:39:35 executing program 1:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r0=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r0}}, 0x30)

15:39:35 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, 0xffffffffffffffff, 0x9a62f000)

15:39:35 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:35 executing program 1:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r0=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r0}}, 0x30)

15:39:35 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, 0xffffffffffffffff, 0x9a62f000)

15:39:35 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:35 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18, 0x71, 0x0, {{0x0, 0x2}}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18, 0x71, 0x0, {{0x0, 0x2}}}, 0x18) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x9}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)

15:39:35 executing program 2:
ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x5) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x0, r1, 0x1c, 0x0, @ib={0x1b, 0x9, 0x6, {"c400e2cc1f7d02811b716359cad7c163"}, 0x4, 0x0, 0x80000000}}}, 0xa0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:35 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x1)

15:39:35 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18, 0x71, 0x0, {{0x0, 0x2}}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:35 executing program 5:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {r1, 0x6, "d770f7", "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"}}, 0x110)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3f}, 0x1, 0x0, 0x0, 0x800}, 0x80)
write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r1, r0}}, 0x18)

15:39:35 executing program 1:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r0=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r0}}, 0x30)

15:39:35 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18, 0x71, 0x0, {{0x0, 0x2}}}, 0x18) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:35 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x1)

15:39:35 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:35 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x1, {0xffffffff, 0x2, "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", 0x1, 0x2, 0x29, 0x40, 0x4, 0x9, 0x3, 0x1}, r1}}, 0x128)

15:39:35 executing program 5:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {r1, 0x6, "d770f7", "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"}}, 0x110) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3f}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async)
write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r1, r0}}, 0x18)

15:39:35 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:35 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x1)

15:39:35 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080)=0x11200, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000200)=0x3f, 0x4)
getsockopt$nfc_llcp(r0, 0x118, 0x0, &(0x7f00000000c0)=""/178, 0xb2)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:35 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.max\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f0000000040)=0x33a, 0x12)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:35 executing program 3:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {r1, 0x6, "d770f7", "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"}}, 0x110)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3f}, 0x1, 0x0, 0x0, 0x800}, 0x80)
write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r1, r0}}, 0x18)

15:39:35 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x1)

15:39:36 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:36 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x1)

15:39:36 executing program 5:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async, rerun: 32)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 32)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {r1, 0x6, "d770f7", "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"}}, 0x110)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3f}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async, rerun: 64)
write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r1, r0}}, 0x18) (rerun: 64)

15:39:36 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20) (async, rerun: 64)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async, rerun: 64)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080)=0x11200, 0x4) (async)
bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000200)=0x3f, 0x4)
getsockopt$nfc_llcp(r0, 0x118, 0x0, &(0x7f00000000c0)=""/178, 0xb2) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:36 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x1)

15:39:36 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async, rerun: 64)
r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.max\x00', 0x2, 0x0) (rerun: 64)
write$cgroup_int(r2, &(0x7f0000000040)=0x33a, 0x12) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:36 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:36 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x1, {0xffffffff, 0x2, "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", 0x1, 0x2, 0x29, 0x40, 0x4, 0x9, 0x3, 0x1}, r1}}, 0x128)

15:39:36 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x1)

15:39:36 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.max\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f0000000040)=0x33a, 0x12)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.max\x00', 0x2, 0x0) (async)
write$cgroup_int(r2, &(0x7f0000000040)=0x33a, 0x12) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)

15:39:36 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:36 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x0)

15:39:36 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x0, r4, 0x10, 0x0, @in={0x2, 0x4e24, @broadcast}}}, 0xa0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r6, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {r6, 0x400, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0x1800000}, @in={0x2, 0x4e20, @loopback}}}, 0x118)

15:39:36 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x0)

15:39:36 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x480c4}, 0x0)

15:39:36 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080)=0x11200, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000200)=0x3f, 0x4)
getsockopt$nfc_llcp(r0, 0x118, 0x0, &(0x7f00000000c0)=""/178, 0xb2)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080)=0x11200, 0x4) (async)
bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000200)=0x3f, 0x4) (async)
getsockopt$nfc_llcp(r0, 0x118, 0x0, &(0x7f00000000c0)=""/178, 0xb2) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) (async)

15:39:36 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x0)

15:39:36 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:36 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000040)={0x11, 0x10}, 0x18)

15:39:36 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x0, r4, 0x10, 0x0, @in={0x2, 0x4e24, @broadcast}}}, 0xa0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r6, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {r6, 0x400, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0x1800000}, @in={0x2, 0x4e20, @loopback}}}, 0x118)

15:39:36 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x480c4}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x480c4}, 0x0) (async)

15:39:36 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:36 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x30)

15:39:36 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x480c4}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x480c4}, 0x0) (async)

15:39:36 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2)

15:39:36 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r0}}, 0x18)

15:39:36 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
getsockopt$nfc_llcp(r0, 0x118, 0x1, &(0x7f0000000000)=""/147, 0x93)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x3, 0x80, 0x51, 0x8, 0x7, 0x8, 0x0, 0x7, 0x20, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x59058a69, 0x4, @perf_bp={&(0x7f00000000c0), 0xa}, 0x8000, 0x6e9, 0x2704, 0x1, 0x6, 0x3, 0x200, 0x0, 0x2, 0x0, 0x9})
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:36 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000040)={0x11, 0x10}, 0x18)

15:39:36 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) (async)

15:39:36 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x30)

15:39:36 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2)

15:39:36 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) (async)

15:39:36 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:36 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x30)

15:39:36 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (fail_nth: 1)

15:39:36 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000040)={0x11, 0x10}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000040)={0x11, 0x10}, 0x18) (async)

15:39:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (fail_nth: 1)

15:39:36 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
getsockopt$nfc_llcp(r0, 0x118, 0x1, &(0x7f0000000000)=""/147, 0x93)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x3, 0x80, 0x51, 0x8, 0x7, 0x8, 0x0, 0x7, 0x20, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x59058a69, 0x4, @perf_bp={&(0x7f00000000c0), 0xa}, 0x8000, 0x6e9, 0x2704, 0x1, 0x6, 0x3, 0x200, 0x0, 0x2, 0x0, 0x9})
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
getsockopt$nfc_llcp(r0, 0x118, 0x1, &(0x7f0000000000)=""/147, 0x93) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x3, 0x80, 0x51, 0x8, 0x7, 0x8, 0x0, 0x7, 0x20, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x59058a69, 0x4, @perf_bp={&(0x7f00000000c0), 0xa}, 0x8000, 0x6e9, 0x2704, 0x1, 0x6, 0x3, 0x200, 0x0, 0x2, 0x0, 0x9}) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) (async)

15:39:36 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r1 = getpgrp(0xffffffffffffffff)
getpgid(r1)
ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3f, 0x9, 0x5, 0x3, 0x4, r1})

15:39:36 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x30)

15:39:36 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0]})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3, 0x5}}, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

[  726.011157] FAULT_INJECTION: forcing a failure.
[  726.011157] name failslab, interval 1, probability 0, space 0, times 0
[  726.080945] CPU: 0 PID: 9616 Comm: syz-executor.3 Not tainted 4.14.302-syzkaller #0
[  726.088756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[  726.098125] Call Trace:
[  726.100713]  dump_stack+0x1b2/0x281
[  726.104349]  should_fail.cold+0x10a/0x149
[  726.108498]  should_failslab+0xd6/0x130
[  726.112480]  kmem_cache_alloc+0x28e/0x3c0
[  726.116628]  __split_vma+0xc8/0x6c0
[  726.120259]  do_munmap+0x25b/0xc30
[  726.123800]  mmap_region+0x217/0x1220
[  726.127603]  do_mmap+0x5b3/0xcb0
[  726.130968]  vm_mmap_pgoff+0x14e/0x1a0
[  726.134856]  ? randomize_page+0x80/0x80
[  726.138842]  SyS_mmap_pgoff+0x249/0x510
[  726.142813]  ? find_mergeable_anon_vma+0x230/0x230
[  726.147738]  ? __do_page_fault+0x159/0xad0
[  726.151967]  ? do_syscall_64+0x4c/0x640
[  726.155936]  ? align_vdso_addr+0x250/0x250
[  726.160167]  do_syscall_64+0x1d5/0x640
[  726.164057]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
[  726.169234] RIP: 0033:0x7f961c47d0d9
[  726.172939] RSP: 002b:00007f961a9ef168 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
15:39:37 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
getsockopt$nfc_llcp(r0, 0x118, 0x1, &(0x7f0000000000)=""/147, 0x93) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x3, 0x80, 0x51, 0x8, 0x7, 0x8, 0x0, 0x7, 0x20, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x59058a69, 0x4, @perf_bp={&(0x7f00000000c0), 0xa}, 0x8000, 0x6e9, 0x2704, 0x1, 0x6, 0x3, 0x200, 0x0, 0x2, 0x0, 0x9}) (async, rerun: 32)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 32)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:37 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async, rerun: 32)
r1 = getpgrp(0xffffffffffffffff) (rerun: 32)
getpgid(r1)
ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3f, 0x9, 0x5, 0x3, 0x4, r1})

15:39:37 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0]})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3, 0x5}}, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0]}) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3, 0x5}}, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)

[  726.180643] RAX: ffffffffffffffda RBX: 00007f961c59cf80 RCX: 00007f961c47d0d9
[  726.187944] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffa000
[  726.195208] RBP: 00007f961a9ef1d0 R08: 0000000000000003 R09: 0000000000000000
[  726.202467] R10: 0000000000004011 R11: 0000000000000246 R12: 0000000000000001
[  726.209734] R13: 00007ffdc01875ef R14: 00007f961a9ef300 R15: 0000000000022000
15:39:37 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f, 0x8}}, 0x57)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:37 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
r1 = getpgrp(0xffffffffffffffff)
getpgid(r1) (async)
ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3f, 0x9, 0x5, 0x3, 0x4, r1})

15:39:37 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x30)

15:39:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (fail_nth: 2)

[  726.326802] FAULT_INJECTION: forcing a failure.
[  726.326802] name failslab, interval 1, probability 0, space 0, times 0
[  726.341496] CPU: 0 PID: 9690 Comm: syz-executor.3 Not tainted 4.14.302-syzkaller #0
[  726.349303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[  726.358645] Call Trace:
[  726.361227]  dump_stack+0x1b2/0x281
[  726.364858]  should_fail.cold+0x10a/0x149
[  726.369027]  should_failslab+0xd6/0x130
[  726.373003]  kmem_cache_alloc+0x28e/0x3c0
[  726.377148]  __split_vma+0xc8/0x6c0
[  726.380774]  do_munmap+0x2bc/0xc30
[  726.384313]  mmap_region+0x217/0x1220
[  726.388113]  do_mmap+0x5b3/0xcb0
[  726.391479]  vm_mmap_pgoff+0x14e/0x1a0
[  726.395367]  ? randomize_page+0x80/0x80
[  726.399345]  SyS_mmap_pgoff+0x249/0x510
[  726.403314]  ? find_mergeable_anon_vma+0x230/0x230
[  726.408251]  ? __do_page_fault+0x159/0xad0
[  726.412483]  ? do_syscall_64+0x4c/0x640
[  726.416450]  ? align_vdso_addr+0x250/0x250
[  726.420680]  do_syscall_64+0x1d5/0x640
15:39:37 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0]}) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3, 0x5}}, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

[  726.424573]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
[  726.429752] RIP: 0033:0x7f961c47d0d9
[  726.433459] RSP: 002b:00007f961a9ef168 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  726.441158] RAX: ffffffffffffffda RBX: 00007f961c59cf80 RCX: 00007f961c47d0d9
[  726.448504] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffa000
[  726.455764] RBP: 00007f961a9ef1d0 R08: 0000000000000003 R09: 0000000000000000
[  726.463024] R10: 0000000000004011 R11: 0000000000000246 R12: 0000000000000001
[  726.470286] R13: 00007ffdc01875ef R14: 00007f961a9ef300 R15: 0000000000022000
15:39:37 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40840}, 0x20000101)

15:39:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (fail_nth: 3)

15:39:37 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x30)

15:39:37 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f, 0x8}}, 0x57) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async, rerun: 64)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (rerun: 64)

[  726.520356] FAULT_INJECTION: forcing a failure.
[  726.520356] name failslab, interval 1, probability 0, space 0, times 0
[  726.543035] CPU: 0 PID: 9718 Comm: syz-executor.3 Not tainted 4.14.302-syzkaller #0
[  726.550848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[  726.560192] Call Trace:
[  726.562777]  dump_stack+0x1b2/0x281
[  726.566402]  should_fail.cold+0x10a/0x149
[  726.570553]  should_failslab+0xd6/0x130
[  726.574526]  kmem_cache_alloc+0x28e/0x3c0
[  726.578669]  mmap_region+0x7c1/0x1220
[  726.582473]  do_mmap+0x5b3/0xcb0
[  726.585837]  vm_mmap_pgoff+0x14e/0x1a0
[  726.589723]  ? randomize_page+0x80/0x80
[  726.593695]  SyS_mmap_pgoff+0x249/0x510
[  726.597668]  ? find_mergeable_anon_vma+0x230/0x230
[  726.602591]  ? __do_page_fault+0x159/0xad0
[  726.606819]  ? do_syscall_64+0x4c/0x640
[  726.610798]  ? align_vdso_addr+0x250/0x250
[  726.615027]  do_syscall_64+0x1d5/0x640
[  726.618913]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
[  726.624104] RIP: 0033:0x7f961c47d0d9
[  726.627824] RSP: 002b:00007f961a9ef168 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  726.635522] RAX: ffffffffffffffda RBX: 00007f961c59cf80 RCX: 00007f961c47d0d9
[  726.642786] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffa000
[  726.650050] RBP: 00007f961a9ef1d0 R08: 0000000000000003 R09: 0000000000000000
[  726.657325] R10: 0000000000004011 R11: 0000000000000246 R12: 0000000000000001
[  726.664596] R13: 00007ffdc01875ef R14: 00007f961a9ef300 R15: 0000000000022000
15:39:37 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0xfffffbffffffffff, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000008c0)={0x7, 0x8, 0xfa00, {r1, 0xfffffffe}}, 0x10)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000002c0)={0x0, 0x5, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000b00)={0x15, 0x110, 0xfa00, {r1, 0x8000, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x2b7, @dev={0xfe, 0x80, '\x00', 0x16}, 0x1ff}, @in={0x2, 0x4e23, @empty}}}, 0x118)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {0x20, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}], r6, 0x1, 0x1, 0x90}}, 0x20)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000840)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r6, r7}}, 0x18)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r8, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18)
r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r9, &(0x7f0000000940)={0x18}, 0x18)
getsockopt$nfc_llcp(r9, 0x118, 0x4, &(0x7f0000000c40)=""/211, 0xd3)

15:39:37 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40840}, 0x20000101)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40840}, 0x20000101) (async)

15:39:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (fail_nth: 4)

15:39:37 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f, 0x8}}, 0x57) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async, rerun: 64)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (rerun: 64)

15:39:37 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffffc0, &(0x7f0000000000)={0x0, 0x57}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000944)

15:39:37 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:37 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffffc0, &(0x7f0000000000)={0x0, 0x57}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000944)

15:39:37 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40840}, 0x20000101)

15:39:37 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {r4, 0xd5, "9e4374", "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"}}, 0x110)

15:39:37 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0xfffffbffffffffff, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000008c0)={0x7, 0x8, 0xfa00, {r1, 0xfffffffe}}, 0x10)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000002c0)={0x0, 0x5, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000b00)={0x15, 0x110, 0xfa00, {r1, 0x8000, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x2b7, @dev={0xfe, 0x80, '\x00', 0x16}, 0x1ff}, @in={0x2, 0x4e23, @empty}}}, 0x118) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18) (async, rerun: 32)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 32)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {0x20, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}], r6, 0x1, 0x1, 0x90}}, 0x20)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000840)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r6, r7}}, 0x18) (async, rerun: 32)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (rerun: 32)
write$P9_ROPEN(r8, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) (async)
r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r9, &(0x7f0000000940)={0x18}, 0x18) (async)
getsockopt$nfc_llcp(r9, 0x118, 0x4, &(0x7f0000000c40)=""/211, 0xd3)

15:39:37 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:37 executing program 5:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4014}, 0x8000)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))

15:39:37 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffffc0, &(0x7f0000000000)={0x0, 0x57}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000944)

15:39:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x4}}]}, 0x6c}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000680)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x4}}]}, 0x6c}}, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000680)={'team0\x00', <r12=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r11, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', <r13=>0x0})
r14 = socket$inet_udp(0x2, 0x2, 0x0)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000680)={'team0\x00', <r17=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r15, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r16, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r18=>0x0})
r19 = socket$inet_udp(0x2, 0x2, 0x0)
r20 = socket$nl_generic(0x10, 0x3, 0x10)
r21 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r19, 0x8933, &(0x7f0000000680)={'team0\x00', <r22=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r20, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r21, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r22}, {0x4}}]}, 0x6c}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000001c0)={0x730, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8db}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffd614}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r8}, {0x4}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x1, 0x9, 0x1}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r22}}}]}}]}, 0x730}, 0x1, 0x0, 0x0, 0x80}, 0x20004002)

15:39:37 executing program 5:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4014}, 0x8000) (async)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))

15:39:37 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x1)

15:39:37 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x4}}]}, 0x6c}}, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000680)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x4}}]}, 0x6c}}, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000680)={'team0\x00', <r12=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r11, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x4}}]}, 0x6c}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', <r13=>0x0}) (async)
r14 = socket$inet_udp(0x2, 0x2, 0x0)
r15 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r16 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000680)={'team0\x00', <r17=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r15, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r16, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x4}}]}, 0x6c}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r18=>0x0}) (async)
r19 = socket$inet_udp(0x2, 0x2, 0x0)
r20 = socket$nl_generic(0x10, 0x3, 0x10)
r21 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r19, 0x8933, &(0x7f0000000680)={'team0\x00', <r22=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r20, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r21, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r22}, {0x4}}]}, 0x6c}}, 0x0) (async)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000001c0)={0x730, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8db}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffd614}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r8}, {0x4}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x1, 0x9, 0x1}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r22}}}]}}]}, 0x730}, 0x1, 0x0, 0x0, 0x80}, 0x20004002)

15:39:37 executing program 5:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4014}, 0x8000)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000))
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4014}, 0x8000) (async)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) (async)

15:39:37 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {r4, 0xd5, "9e4374", "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"}}, 0x110)

15:39:37 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x1)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) (async)

15:39:38 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0xfffffbffffffffff, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000008c0)={0x7, 0x8, 0xfa00, {r1, 0xfffffffe}}, 0x10)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000002c0)={0x0, 0x5, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000b00)={0x15, 0x110, 0xfa00, {r1, 0x8000, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x2b7, @dev={0xfe, 0x80, '\x00', 0x16}, 0x1ff}, @in={0x2, 0x4e23, @empty}}}, 0x118) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18) (async, rerun: 32)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 32)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {0x20, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}], r6, 0x1, 0x1, 0x90}}, 0x20) (async)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000840)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r6, r7}}, 0x18) (async, rerun: 64)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (rerun: 64)
write$P9_ROPEN(r8, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) (async)
r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r9, &(0x7f0000000940)={0x18}, 0x18) (async)
getsockopt$nfc_llcp(r9, 0x118, 0x4, &(0x7f0000000c40)=""/211, 0xd3)

15:39:38 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:38 executing program 5:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048000}, 0x400c080)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x4}}]}, 0x6c}}, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000680)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x4}}]}, 0x6c}}, 0x0) (async)
r9 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r11 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000680)={'team0\x00', <r12=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r11, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', <r13=>0x0}) (async, rerun: 32)
r14 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32)
r15 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r16 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000680)={'team0\x00', <r17=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r15, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r16, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r18=>0x0}) (async)
r19 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r20 = socket$nl_generic(0x10, 0x3, 0x10)
r21 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r19, 0x8933, &(0x7f0000000680)={'team0\x00', <r22=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r20, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r21, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r22}, {0x4}}]}, 0x6c}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000001c0)={0x730, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8db}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffd614}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r8}, {0x4}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x1, 0x9, 0x1}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r22}}}]}}]}, 0x730}, 0x1, 0x0, 0x0, 0x80}, 0x20004002)

15:39:38 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x1)

15:39:38 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20) (async, rerun: 64)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {r4, 0xd5, "9e4374", "2822f586317b8dba770338b57a51ebb819c7f7cc3de8909f34a04d9c7511374958c2db2fc43b4a4b27a11bd87fbf5b15fa9d4045886e5752b61c650348e8e1b1551c294d6cf895a7311c7749d1d9b07a7c21d7ec0b4a2d2900c6fb327ee062793f7ca382ee8950c0d569e889db09bf7caa00f74b1197d4c216ba473ccc23ab13a63bff489720cf83660ab3bfb55d2d7ca5673f8c838170de21d3c68a95efc67767036a80bff5c6c5a02e9ed44a05603e790218d22a321e1a27854b621afda228d091bc0a18d35a50b90ed39147ca9680a40fcfa464f2927be468e33604334ca76f89d3448e2f10e5baa13181b7e85b5ec7341c6e2cd85f8adaebfd4d49b7cfce"}}, 0x110) (rerun: 64)

15:39:38 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
accept$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000080)=0x60)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:38 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:38 executing program 5:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048000}, 0x400c080) (async)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:38 executing program 5:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048000}, 0x400c080) (async)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:38 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:38 executing program 0:
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0xfffffffffffffffd)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x6)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:38 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
socket$l2tp(0x2, 0x2, 0x73)

15:39:38 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
accept$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000080)=0x60)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
pipe2$watch_queue(&(0x7f0000000040), 0x80) (async)
accept$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000080)=0x60) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)

15:39:38 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0)

15:39:38 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:38 executing program 0:
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0xfffffffffffffffd)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x6)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:38 executing program 3:
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4040800)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:38 executing program 3:
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4040800)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4040800) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)

15:39:38 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)

15:39:38 executing program 0:
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0xfffffffffffffffd) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x6) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:38 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
accept$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000080)=0x60) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:38 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0)

15:39:38 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)
socket$l2tp(0x2, 0x2, 0x73)

15:39:38 executing program 3:
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4040800)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4040800) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)

15:39:38 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x23}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000080)

15:39:38 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0)

15:39:38 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:38 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)
socket$l2tp(0x2, 0x2, 0x73)

15:39:38 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18)
ioctl$SG_BLKSECTGET(r2, 0x1267, &(0x7f0000000000))
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{0x0, 0x0, [0x0, 0x0, 0x40000000, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {0x20, 0x0, [0xa33c, 0x0, 0x6]}], r2, 0x1, 0x1, 0x90}}, 0x20)
socket(0x18, 0x2, 0x3)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140)={0x8001}, 0x4)

15:39:38 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x5c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3f}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x79}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000)

15:39:38 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x23}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000080)

15:39:38 executing program 2:
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1})
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @loopback, 0x7}}}, 0x30)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6})
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

15:39:38 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x30)

15:39:38 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) (async)
ioctl$SG_BLKSECTGET(r2, 0x1267, &(0x7f0000000000))
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:38 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x5c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3f}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x79}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000)

15:39:38 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 64)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) (async, rerun: 32)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x23}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000080) (rerun: 32)

15:39:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{0x0, 0x0, [0x0, 0x0, 0x40000000, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {0x20, 0x0, [0xa33c, 0x0, 0x6]}], r2, 0x1, 0x1, 0x90}}, 0x20)
socket(0x18, 0x2, 0x3) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140)={0x8001}, 0x4)

15:39:38 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x30)

15:39:38 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x5c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3f}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x79}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000)

15:39:38 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async, rerun: 32)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80) (rerun: 32)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18)
ioctl$SG_BLKSECTGET(r2, 0x1267, &(0x7f0000000000))
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:39 executing program 2:
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1})
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async, rerun: 64)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 64)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async, rerun: 64)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) (rerun: 64)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @loopback, 0x7}}}, 0x30)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6})
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

15:39:39 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x30)

15:39:39 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x7, @mcast2}, r1}}, 0x30)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{0x0, 0x0, [0x0, 0x0, 0x40000000, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {0x20, 0x0, [0xa33c, 0x0, 0x6]}], r2, 0x1, 0x1, 0x90}}, 0x20)
socket(0x18, 0x2, 0x3)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140)={0x8001}, 0x4)

15:39:39 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4c0d0)

15:39:39 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000))
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000003c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xcc}, r4}}, 0x30)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x2}}, 0x18)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000940)={0x18}, 0x18)
ioctl$SG_SET_DEBUG(r5, 0x227e, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x1000}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x40408d0)

15:39:39 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4c0d0)

15:39:39 executing program 1:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x23}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000080)

15:39:39 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (async, rerun: 32)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x7, @mcast2}, r1}}, 0x30) (async, rerun: 32)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:39 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4c0d0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4c0d0) (async)

15:39:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x4}}]}, 0x6c}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000680)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x4}}]}, 0x6c}}, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000680)={'team0\x00', <r12=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r11, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', <r13=>0x0})
r14 = socket$inet_udp(0x2, 0x2, 0x0)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000680)={'team0\x00', <r17=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r15, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r16, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r18=>0x0})
r19 = socket$inet_udp(0x2, 0x2, 0x0)
r20 = socket$nl_generic(0x10, 0x3, 0x10)
r21 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r19, 0x8933, &(0x7f0000000680)={'team0\x00', <r22=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r20, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r21, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r22}, {0x4}}]}, 0x6c}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000001c0)={0x730, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8db}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffd614}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r8}, {0x4}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x1, 0x9, 0x1}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r22}}}]}}]}, 0x730}, 0x1, 0x0, 0x0, 0x80}, 0x20004002)

15:39:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)

15:39:39 executing program 2:
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @loopback, 0x7}}}, 0x30) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6})
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

15:39:39 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x7, @mcast2}, r1}}, 0x30)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x7, @mcast2}, r1}}, 0x30) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)

15:39:39 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000003c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xcc}, r4}}, 0x30) (async)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x2}}, 0x18) (async, rerun: 64)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (rerun: 64)
write$P9_ROPEN(r5, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$SG_SET_DEBUG(r5, 0x227e, &(0x7f0000000040)) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async, rerun: 32)
sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x1000}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x40408d0) (rerun: 32)

15:39:39 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8010)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c001d00", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf250500ac0008001700", @ANYRES32=r2, @ANYBLOB="08000a00040000000500050000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000)

15:39:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async)

15:39:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)

15:39:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)

15:39:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async)

15:39:39 executing program 5:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:39 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async, rerun: 64)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (rerun: 64)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8010)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c001d00", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf250500ac0008001700", @ANYRES32=r2, @ANYBLOB="08000a00040000000500050000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000)

15:39:39 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30) (fail_nth: 1)

15:39:39 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0x12, r0, 0xb1707000)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x38, 0x0, "46c55b83f0fcd86271ce7a356e1d3823aff3b7d161da7337ca69820d9ddcc2a8eca301eb1948c42e754925c7493743175cc6a7fc88656467247ad9f9abf7b228a609c7c4f56f4d686e171cf6028cde18"}, 0xd8)

15:39:39 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000003c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xcc}, r4}}, 0x30) (async)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x2}}, 0x18) (async)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$SG_SET_DEBUG(r5, 0x227e, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x1000}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x40408d0)

15:39:39 executing program 5:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:39 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async, rerun: 64)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8010) (async, rerun: 32)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async, rerun: 32)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c001d00", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf250500ac0008001700", @ANYRES32=r2, @ANYBLOB="08000a00040000000500050000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000)

15:39:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0x12, r0, 0xb1707000) (async, rerun: 64)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async, rerun: 64)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async, rerun: 64)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (async, rerun: 64)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x38, 0x0, "46c55b83f0fcd86271ce7a356e1d3823aff3b7d161da7337ca69820d9ddcc2a8eca301eb1948c42e754925c7493743175cc6a7fc88656467247ad9f9abf7b228a609c7c4f56f4d686e171cf6028cde18"}, 0xd8)

15:39:39 executing program 1:
r0 = getpgrp(0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x10, 0x4, @tid=r0}, &(0x7f00000000c0))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)

15:39:39 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)

15:39:39 executing program 5:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:39 executing program 1:
r0 = getpgrp(0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x10, 0x4, @tid=r0}, &(0x7f00000000c0)) (async, rerun: 32)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 32)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)

15:39:39 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xe6)
pipe2$watch_queue(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000380)={0xa, 0x0, [{0x96c, 0x12000, 0xffff, [0x142, 0x8, 0x0, 0x2, 0xc289, 0x8, 0x7ff, 0xe566]}, {0x49e, 0x0, 0x3, [0x1, 0x2, 0x7f, 0x1, 0x7, 0xe1, 0x7, 0x4]}, {0x40, 0x7ff, 0x4, [0x2, 0x101, 0x9, 0x6, 0x60, 0x400, 0x1, 0x7278]}, {0x400, 0x2, 0xf1c, [0x7, 0x100, 0x40, 0xd511, 0x5, 0x0, 0x5, 0x1000]}, {0x8, 0x6, 0xd215, [0x7f, 0x100, 0x0, 0x20, 0x4, 0x8001, 0x2, 0x2]}, {0x1, 0x8, 0x7ff, [0x200, 0x3, 0xc1d, 0x0, 0xfffffffc, 0x5, 0x819, 0x10001000]}, {0x32, 0x7fc00, 0x6, [0x7, 0xffffffff, 0x20, 0x101, 0x8, 0x7f, 0x10, 0x6]}, {0x75bf, 0x6, 0x800, [0x5, 0x8, 0x6, 0x4, 0x1, 0x0, 0xcf45]}, {0x79, 0x4, 0x7, [0x0, 0x7, 0x80000001, 0x401, 0x4, 0x80000000, 0x7, 0x1f]}, {0x100, 0x4, 0x10000, [0x8, 0x6, 0x5, 0x73d9, 0x3ff, 0xffffe98f, 0x2, 0x80]}]})
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:39 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
accept$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000000)=0x60)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4044000}, 0x40015)

15:39:39 executing program 5:
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:39 executing program 5:
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:39 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:39 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
accept$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000000)=0x60) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4044000}, 0x40015)

15:39:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0x12, r0, 0xb1707000)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (async)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x38, 0x0, "46c55b83f0fcd86271ce7a356e1d3823aff3b7d161da7337ca69820d9ddcc2a8eca301eb1948c42e754925c7493743175cc6a7fc88656467247ad9f9abf7b228a609c7c4f56f4d686e171cf6028cde18"}, 0xd8)

15:39:39 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xe6)
pipe2$watch_queue(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000380)={0xa, 0x0, [{0x96c, 0x12000, 0xffff, [0x142, 0x8, 0x0, 0x2, 0xc289, 0x8, 0x7ff, 0xe566]}, {0x49e, 0x0, 0x3, [0x1, 0x2, 0x7f, 0x1, 0x7, 0xe1, 0x7, 0x4]}, {0x40, 0x7ff, 0x4, [0x2, 0x101, 0x9, 0x6, 0x60, 0x400, 0x1, 0x7278]}, {0x400, 0x2, 0xf1c, [0x7, 0x100, 0x40, 0xd511, 0x5, 0x0, 0x5, 0x1000]}, {0x8, 0x6, 0xd215, [0x7f, 0x100, 0x0, 0x20, 0x4, 0x8001, 0x2, 0x2]}, {0x1, 0x8, 0x7ff, [0x200, 0x3, 0xc1d, 0x0, 0xfffffffc, 0x5, 0x819, 0x10001000]}, {0x32, 0x7fc00, 0x6, [0x7, 0xffffffff, 0x20, 0x101, 0x8, 0x7f, 0x10, 0x6]}, {0x75bf, 0x6, 0x800, [0x5, 0x8, 0x6, 0x4, 0x1, 0x0, 0xcf45]}, {0x79, 0x4, 0x7, [0x0, 0x7, 0x80000001, 0x401, 0x4, 0x80000000, 0x7, 0x1f]}, {0x100, 0x4, 0x10000, [0x8, 0x6, 0x5, 0x73d9, 0x3ff, 0xffffe98f, 0x2, 0x80]}]}) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:39 executing program 5:
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:39 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
accept$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000000)=0x60)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4044000}, 0x40015)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
accept$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000000)=0x60) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4044000}, 0x40015) (async)

15:39:39 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042cbd3000fbdbdf25060000001400080064766d7270310000000000009fab9543ea16000000000c000f00ffffff7f0801000006001c000000000005001200a900000014002000fc00000000000000000000000000000005000400090000000c0016000100000000000000"], 0x6c}}, 0x44000)

15:39:40 executing program 1:
r0 = getpgrp(0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x10, 0x4, @tid=r0}, &(0x7f00000000c0))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)
getpgrp(0xffffffffffffffff) (async)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x10, 0x4, @tid=r0}, &(0x7f00000000c0)) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30) (async)

15:39:40 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20044010)
write$P9_RLERRORu(0xffffffffffffffff, 0xfffffffffffffffd, 0x0)

15:39:40 executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
socketpair(0xb, 0x5, 0x10000, &(0x7f0000000000))
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r2, 0x0)

15:39:40 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {r1, 0x3, "bcbc51", "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"}}, 0x12)

15:39:40 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042cbd3000fbdbdf25060000001400080064766d7270310000000000009fab9543ea16000000000c000f00ffffff7f0801000006001c000000000005001200a900000014002000fc00000000000000000000000000000005000400090000000c0016000100000000000000"], 0x6c}}, 0x44000)

15:39:40 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xe6)
pipe2$watch_queue(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000380)={0xa, 0x0, [{0x96c, 0x12000, 0xffff, [0x142, 0x8, 0x0, 0x2, 0xc289, 0x8, 0x7ff, 0xe566]}, {0x49e, 0x0, 0x3, [0x1, 0x2, 0x7f, 0x1, 0x7, 0xe1, 0x7, 0x4]}, {0x40, 0x7ff, 0x4, [0x2, 0x101, 0x9, 0x6, 0x60, 0x400, 0x1, 0x7278]}, {0x400, 0x2, 0xf1c, [0x7, 0x100, 0x40, 0xd511, 0x5, 0x0, 0x5, 0x1000]}, {0x8, 0x6, 0xd215, [0x7f, 0x100, 0x0, 0x20, 0x4, 0x8001, 0x2, 0x2]}, {0x1, 0x8, 0x7ff, [0x200, 0x3, 0xc1d, 0x0, 0xfffffffc, 0x5, 0x819, 0x10001000]}, {0x32, 0x7fc00, 0x6, [0x7, 0xffffffff, 0x20, 0x101, 0x8, 0x7f, 0x10, 0x6]}, {0x75bf, 0x6, 0x800, [0x5, 0x8, 0x6, 0x4, 0x1, 0x0, 0xcf45]}, {0x79, 0x4, 0x7, [0x0, 0x7, 0x80000001, 0x401, 0x4, 0x80000000, 0x7, 0x1f]}, {0x100, 0x4, 0x10000, [0x8, 0x6, 0x5, 0x73d9, 0x3ff, 0xffffe98f, 0x2, 0x80]}]})
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xe6) (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000380)={0xa, 0x0, [{0x96c, 0x12000, 0xffff, [0x142, 0x8, 0x0, 0x2, 0xc289, 0x8, 0x7ff, 0xe566]}, {0x49e, 0x0, 0x3, [0x1, 0x2, 0x7f, 0x1, 0x7, 0xe1, 0x7, 0x4]}, {0x40, 0x7ff, 0x4, [0x2, 0x101, 0x9, 0x6, 0x60, 0x400, 0x1, 0x7278]}, {0x400, 0x2, 0xf1c, [0x7, 0x100, 0x40, 0xd511, 0x5, 0x0, 0x5, 0x1000]}, {0x8, 0x6, 0xd215, [0x7f, 0x100, 0x0, 0x20, 0x4, 0x8001, 0x2, 0x2]}, {0x1, 0x8, 0x7ff, [0x200, 0x3, 0xc1d, 0x0, 0xfffffffc, 0x5, 0x819, 0x10001000]}, {0x32, 0x7fc00, 0x6, [0x7, 0xffffffff, 0x20, 0x101, 0x8, 0x7f, 0x10, 0x6]}, {0x75bf, 0x6, 0x800, [0x5, 0x8, 0x6, 0x4, 0x1, 0x0, 0xcf45]}, {0x79, 0x4, 0x7, [0x0, 0x7, 0x80000001, 0x401, 0x4, 0x80000000, 0x7, 0x1f]}, {0x100, 0x4, 0x10000, [0x8, 0x6, 0x5, 0x73d9, 0x3ff, 0xffffe98f, 0x2, 0x80]}]}) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) (async)

15:39:40 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20044010) (async)
write$P9_RLERRORu(0xffffffffffffffff, 0xfffffffffffffffd, 0x0)

15:39:40 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {r1, 0x3, "bcbc51", "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"}}, 0x12)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {r1, 0x3, "bcbc51", "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"}}, 0x12) (async)

15:39:40 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042cbd3000fbdbdf25060000001400080064766d7270310000000000009fab9543ea16000000000c000f00ffffff7f0801000006001c000000000005001200a900000014002000fc00000000000000000000000000000005000400090000000c0016000100000000000000"], 0x6c}}, 0x44000)

15:39:40 executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
socketpair(0xb, 0x5, 0x10000, &(0x7f0000000000)) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r2, 0x0)

15:39:40 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff4a, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:40 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20044010)
write$P9_RLERRORu(0xffffffffffffffff, 0xfffffffffffffffd, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20044010) (async)
write$P9_RLERRORu(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) (async)

15:39:40 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:40 executing program 0:
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x1, 0x40, 0xff, 0xaa, 0x0, 0x3678, 0x20002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_bp={&(0x7f0000000000), 0x9}, 0x0, 0xaf0d, 0x8, 0x8, 0x3, 0x659962c8, 0x0, 0x0, 0x8, 0x0, 0x8000}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:40 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000007, 0x10, r0, 0xe673b000)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:40 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {r1, 0x3, "bcbc51", "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"}}, 0x12)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {r1, 0x3, "bcbc51", "f007e8a1b45c0711a7886214ea9cfa8c35e763bbd0b580288be176b1b46106bdc2bb69868a313f1c2a25c699e01bb76b62c14bb833beca07145cfc41d49f48751486f4724adb423b9922b25dbb66a4e62d7fd3238fb0fe4263b7e2355384aa57058be10027326ae45379ec1b0aa9a284bf454edcd5edfa4292c9537863fbbe3cc84f619802148e546e0743c1787ddc0dca8e50f1e728b6ed709da40e5aae587d5861797a6c6831414d91bd034a0bbd5770f53b38ae712f8985c4bb2fb5a25a988715d38d90cb07434429a8c5c758dab0bbd9d57afe8f78daee2e24452e309fe71423865df1b115bb59a7d325072d8015455a7f1c5aacdc204b83fa2a00"}}, 0x12) (async)

15:39:40 executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
socketpair(0xb, 0x5, 0x10000, &(0x7f0000000000))
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r2, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
socketpair(0xb, 0x5, 0x10000, &(0x7f0000000000)) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r2, 0x0) (async)

15:39:40 executing program 0:
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x1, 0x40, 0xff, 0xaa, 0x0, 0x3678, 0x20002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_bp={&(0x7f0000000000), 0x9}, 0x0, 0xaf0d, 0x8, 0x8, 0x3, 0x659962c8, 0x0, 0x0, 0x8, 0x0, 0x8000}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:40 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000007, 0x10, r0, 0xe673b000)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000007, 0x10, r0, 0xe673b000) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)

15:39:40 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff4a, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff4a, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30) (async)

15:39:40 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x1, 0x0, {"aaae472a0fa9e14a45fe1e5448faa890"}, 0xfffffffffffffd52, 0x1ff, 0x9}, @ib={0x1b, 0x200, 0x6, {"a21e81334ca26850454103a7e82d6638"}, 0x0, 0x1ff, 0x2}}}, 0x118)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c800}, 0x8801)

15:39:40 executing program 0:
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x1, 0x40, 0xff, 0xaa, 0x0, 0x3678, 0x20002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_bp={&(0x7f0000000000), 0x9}, 0x0, 0xaf0d, 0x8, 0x8, 0x3, 0x659962c8, 0x0, 0x0, 0x8, 0x0, 0x8000}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x1, 0x40, 0xff, 0xaa, 0x0, 0x3678, 0x20002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_bp={&(0x7f0000000000), 0x9}, 0x0, 0xaf0d, 0x8, 0x8, 0x3, 0x659962c8, 0x0, 0x0, 0x8, 0x0, 0x8000}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)

15:39:40 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000007, 0x10, r0, 0xe673b000)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000007, 0x10, r0, 0xe673b000) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)

15:39:40 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x1, 0x0, {"aaae472a0fa9e14a45fe1e5448faa890"}, 0xfffffffffffffd52, 0x1ff, 0x9}, @ib={0x1b, 0x200, 0x6, {"a21e81334ca26850454103a7e82d6638"}, 0x0, 0x1ff, 0x2}}}, 0x118)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c800}, 0x8801)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x1, 0x0, {"aaae472a0fa9e14a45fe1e5448faa890"}, 0xfffffffffffffd52, 0x1ff, 0x9}, @ib={0x1b, 0x200, 0x6, {"a21e81334ca26850454103a7e82d6638"}, 0x0, 0x1ff, 0x2}}}, 0x118) (async)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c800}, 0x8801) (async)

15:39:40 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff4a, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:40 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x10001)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x1, 0x0, {"aaae472a0fa9e14a45fe1e5448faa890"}, 0xfffffffffffffd52, 0x1ff, 0x9}, @ib={0x1b, 0x200, 0x6, {"a21e81334ca26850454103a7e82d6638"}, 0x0, 0x1ff, 0x2}}}, 0x118)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c800}, 0x8801)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x1, 0x0, {"aaae472a0fa9e14a45fe1e5448faa890"}, 0xfffffffffffffd52, 0x1ff, 0x9}, @ib={0x1b, 0x200, 0x6, {"a21e81334ca26850454103a7e82d6638"}, 0x0, 0x1ff, 0x2}}}, 0x118) (async)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c800}, 0x8801) (async)

15:39:40 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4044005)
pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "9bcc0a95843f97d6", "304b21eed0120c27ead70d834243240d", "f59da11d", "730c34b5549e4af2"}, 0x28)
timer_settime(0x0, 0x1, &(0x7f0000000300), &(0x7f0000000340))
timer_create(0x4, &(0x7f0000000400)={0x0, 0x1, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000440)=<r2=>0x0)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gretap0\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x101}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x4)
timer_gettime(r2, &(0x7f0000000480))
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
accept$nfc_llcp(r3, &(0x7f0000000000), &(0x7f0000000100)=0x60)
r4 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc1}, &(0x7f0000000280)={0x0, "72f859896a5f8df52e76942f7a6ad45ac07b68429fdd859859f42c5ccbe244162772ba13c6e0fd3344312be4428e1cc10be14136836a860d853dc35d271fb4f6", 0x1a}, 0x48, 0xffffffffffffffff)
request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', r4)

15:39:40 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1ff, @mcast2, 0x4dd2}, r3}}, 0x30)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:40 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:40 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4044005) (async)
pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "9bcc0a95843f97d6", "304b21eed0120c27ead70d834243240d", "f59da11d", "730c34b5549e4af2"}, 0x28) (async)
timer_settime(0x0, 0x1, &(0x7f0000000300), &(0x7f0000000340)) (async, rerun: 32)
timer_create(0x4, &(0x7f0000000400)={0x0, 0x1, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000440)=<r2=>0x0) (rerun: 32)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gretap0\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x101}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x4) (async, rerun: 64)
timer_gettime(r2, &(0x7f0000000480)) (async, rerun: 64)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async)
accept$nfc_llcp(r3, &(0x7f0000000000), &(0x7f0000000100)=0x60)
r4 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc1}, &(0x7f0000000280)={0x0, "72f859896a5f8df52e76942f7a6ad45ac07b68429fdd859859f42c5ccbe244162772ba13c6e0fd3344312be4428e1cc10be14136836a860d853dc35d271fb4f6", 0x1a}, 0x48, 0xffffffffffffffff)
request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', r4)

15:39:40 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x10001) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040))

15:39:40 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3, 0x5c}}, 0x10)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r0}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={<r4=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x200}}, 0x10)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:40 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)

15:39:40 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1ff, @mcast2, 0x4dd2}, r3}}, 0x30)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1ff, @mcast2, 0x4dd2}, r3}}, 0x30) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)

15:39:40 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4044005) (async)
pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "9bcc0a95843f97d6", "304b21eed0120c27ead70d834243240d", "f59da11d", "730c34b5549e4af2"}, 0x28)
timer_settime(0x0, 0x1, &(0x7f0000000300), &(0x7f0000000340)) (async)
timer_create(0x4, &(0x7f0000000400)={0x0, 0x1, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000440)=<r2=>0x0)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gretap0\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x101}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x4) (async)
timer_gettime(r2, &(0x7f0000000480)) (async)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async)
accept$nfc_llcp(r3, &(0x7f0000000000), &(0x7f0000000100)=0x60)
r4 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc1}, &(0x7f0000000280)={0x0, "72f859896a5f8df52e76942f7a6ad45ac07b68429fdd859859f42c5ccbe244162772ba13c6e0fd3344312be4428e1cc10be14136836a860d853dc35d271fb4f6", 0x1a}, 0x48, 0xffffffffffffffff)
request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', r4)

15:39:40 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) (async)

15:39:40 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
accept$nfc_llcp(r0, &(0x7f0000000040), &(0x7f0000000100)=0x60)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:40 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)=[{{<r4=>0x80000000}}]})
ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000180)={{0x80000000, 0x0, 0x6, [0x4]}, {r4, 0x0, 0x3, [0x7, 0xffffffff]}, 0x10000000, [0x2, 0xbf8a]})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x158, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1ff, 0xe2, 0x2, 0x3ff}, {0x9, 0x1, 0x6, 0x3}, {0x1ff, 0x3d, 0x7, 0xea}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x80)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4040810)

15:39:40 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x10001) (async, rerun: 32)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040))

15:39:40 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
accept$nfc_llcp(r0, &(0x7f0000000040), &(0x7f0000000100)=0x60) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:40 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3, 0x5c}}, 0x10)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r0}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={<r4=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x200}}, 0x10)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3, 0x5c}}, 0x10) (async)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r0}}, 0x18) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x2, 0x5}}, 0x20) (async)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x200}}, 0x10) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30) (async)

15:39:40 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)=[{{<r4=>0x80000000}}]})
ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000180)={{0x80000000, 0x0, 0x6, [0x4]}, {r4, 0x0, 0x3, [0x7, 0xffffffff]}, 0x10000000, [0x2, 0xbf8a]})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x158, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1ff, 0xe2, 0x2, 0x3ff}, {0x9, 0x1, 0x6, 0x3}, {0x1ff, 0x3d, 0x7, 0xea}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4040810)

15:39:40 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1ff, @mcast2, 0x4dd2}, r3}}, 0x30)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1ff, @mcast2, 0x4dd2}, r3}}, 0x30) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)

15:39:40 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
accept$nfc_llcp(r0, &(0x7f0000000040), &(0x7f0000000100)=0x60)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
accept$nfc_llcp(r0, &(0x7f0000000040), &(0x7f0000000100)=0x60) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)

15:39:40 executing program 3:
r0 = gettid()
ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xb18e, 0x10000, 0x4, 0xffff, 0x8, r0})
get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x7, &(0x7f0000ffd000/0x2000)=nil, 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={<r1=>0x0}, &(0x7f00000000c0)=0xc)
getpgid(r1)

15:39:40 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async, rerun: 32)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (rerun: 32)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)=[{{<r4=>0x80000000}}]})
ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000180)={{0x80000000, 0x0, 0x6, [0x4]}, {r4, 0x0, 0x3, [0x7, 0xffffffff]}, 0x10000000, [0x2, 0xbf8a]}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x158, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1ff, 0xe2, 0x2, 0x3ff}, {0x9, 0x1, 0x6, 0x3}, {0x1ff, 0x3d, 0x7, 0xea}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x80)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4040810)

15:39:40 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180))
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0xf10, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

15:39:40 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3, 0x5c}}, 0x10)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r0}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={<r4=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x200}}, 0x10)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3, 0x5c}}, 0x10) (async)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r0}}, 0x18) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x2, 0x5}}, 0x20) (async)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x200}}, 0x10) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30) (async)

15:39:40 executing program 3:
r0 = gettid()
ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xb18e, 0x10000, 0x4, 0xffff, 0x8, r0})
get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x7, &(0x7f0000ffd000/0x2000)=nil, 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={<r1=>0x0}, &(0x7f00000000c0)=0xc)
getpgid(r1)

15:39:41 executing program 2:
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101080)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8000, @local, 0x1}, r1}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:41 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180))
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0xf10, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0xf10, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)

15:39:41 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c'])
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$sg(&(0x7f0000000240), 0x9, 0x10b002)
ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000280))
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000b0000000000"], 0x1c}}, 0x0)
pipe2$watch_queue(&(0x7f00000003c0), 0x80)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r4, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3f}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000020}, 0x1)

15:39:41 executing program 3:
r0 = gettid()
ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xb18e, 0x10000, 0x4, 0xffff, 0x8, r0})
get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x7, &(0x7f0000ffd000/0x2000)=nil, 0x2) (async, rerun: 32)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={<r1=>0x0}, &(0x7f00000000c0)=0xc) (rerun: 32)
getpgid(r1)

15:39:41 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f, 0x1}}, 0x20)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:41 executing program 1:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/188, 0xbc, 0x1, &(0x7f0000000100)=""/229, 0xe5}, &(0x7f0000000240)=0x40)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)

15:39:41 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c'])
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$sg(&(0x7f0000000240), 0x9, 0x10b002)
ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000280))
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000b0000000000"], 0x1c}}, 0x0)
pipe2$watch_queue(&(0x7f00000003c0), 0x80)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r4, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3f}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000020}, 0x1)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c']) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_open_dev$sg(&(0x7f0000000240), 0x9, 0x10b002) (async)
ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000280)) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000b0000000000"], 0x1c}}, 0x0) (async)
pipe2$watch_queue(&(0x7f00000003c0), 0x80) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r4, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3f}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000020}, 0x1) (async)

15:39:41 executing program 1:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/188, 0xbc, 0x1, &(0x7f0000000100)=""/229, 0xe5}, &(0x7f0000000240)=0x40)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/188, 0xbc, 0x1, &(0x7f0000000100)=""/229, 0xe5}, &(0x7f0000000240)=0x40) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30) (async)

15:39:41 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0xf10, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

15:39:41 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c']) (async, rerun: 32)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async, rerun: 32)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_open_dev$sg(&(0x7f0000000240), 0x9, 0x10b002)
ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000280)) (async)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000b0000000000"], 0x1c}}, 0x0) (async)
pipe2$watch_queue(&(0x7f00000003c0), 0x80)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r4, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3f}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000020}, 0x1)

15:39:41 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f, 0x1}}, 0x20) (async)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async, rerun: 64)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20) (rerun: 64)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:41 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1)

15:39:41 executing program 2:
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101080) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8000, @local, 0x1}, r1}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x4}}]}, 0x6c}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000680)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r9=>0x0})
r10 = socket$inet_udp(0x2, 0x2, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000680)={'team0\x00', <r13=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r11, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r12, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x4}}]}, 0x6c}}, 0x0)
r14 = socket$inet_udp(0x2, 0x2, 0x0)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000680)={'team0\x00', <r17=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r15, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r16, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x4}}]}, 0x6c}}, 0x0)
r18 = socket$inet_udp(0x2, 0x2, 0x0)
r19 = socket$nl_generic(0x10, 0x3, 0x10)
r20 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r18, 0x8933, &(0x7f0000000680)={'team0\x00', <r21=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r19, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r20, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r21}, {0x4}}]}, 0x6c}}, 0x0)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000080)={0x928, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4dcf9c38}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x98}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8000, 0xff, 0x0, 0x7fff}, {0xfff, 0x86, 0x81, 0x1f}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xae}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xd3f2}}}]}}, {{0x8, 0x1, r13}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r21}}}]}}, {{0x8}, {0x58, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xfff7, 0xe0, 0x40}, {0xda, 0x9, 0x2, 0x3f}, {0x9, 0x6, 0xc2, 0x1}, {0x8, 0xff, 0x1, 0x5}]}}}]}}]}, 0x928}, 0x1, 0x0, 0x0, 0x40004}, 0x44011)

15:39:41 executing program 1:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/188, 0xbc, 0x1, &(0x7f0000000100)=""/229, 0xe5}, &(0x7f0000000240)=0x40) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)

15:39:41 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1)

15:39:41 executing program 2:
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101080)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async, rerun: 32)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 32)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8000, @local, 0x1}, r1}}, 0x30) (async, rerun: 32)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 32)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:41 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
socket$inet6_sctp(0xa, 0x5, 0x84)

15:39:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x4}}]}, 0x6c}}, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000680)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x4}}]}, 0x6c}}, 0x0) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r9=>0x0}) (rerun: 64)
r10 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r12 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000680)={'team0\x00', <r13=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r11, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r12, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x4}}]}, 0x6c}}, 0x0) (async)
r14 = socket$inet_udp(0x2, 0x2, 0x0)
r15 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r16 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000680)={'team0\x00', <r17=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r15, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r16, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x4}}]}, 0x6c}}, 0x0)
r18 = socket$inet_udp(0x2, 0x2, 0x0)
r19 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r20 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_team(r18, 0x8933, &(0x7f0000000680)={'team0\x00', <r21=>0x0}) (rerun: 64)
sendmsg$TEAM_CMD_OPTIONS_GET(r19, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r20, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r21}, {0x4}}]}, 0x6c}}, 0x0) (async, rerun: 64)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000080)={0x928, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4dcf9c38}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x98}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8000, 0xff, 0x0, 0x7fff}, {0xfff, 0x86, 0x81, 0x1f}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xae}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xd3f2}}}]}}, {{0x8, 0x1, r13}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r21}}}]}}, {{0x8}, {0x58, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xfff7, 0xe0, 0x40}, {0xda, 0x9, 0x2, 0x3f}, {0x9, 0x6, 0xc2, 0x1}, {0x8, 0xff, 0x1, 0x5}]}}}]}}]}, 0x928}, 0x1, 0x0, 0x0, 0x40004}, 0x44011) (rerun: 64)

15:39:41 executing program 1:
shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffc000/0x2000)=nil)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x8, @mcast2, 0x87}, r1}}, 0x30)

15:39:41 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async, rerun: 64)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (rerun: 64)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1)

15:39:41 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async, rerun: 32)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 32)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f, 0x1}}, 0x20)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:41 executing program 1:
shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffc000/0x2000)=nil)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x8, @mcast2, 0x87}, r1}}, 0x30)
shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffc000/0x2000)=nil) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x8, @mcast2, 0x87}, r1}}, 0x30) (async)

15:39:41 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
socket$inet6_sctp(0xa, 0x5, 0x84)

15:39:41 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)

15:39:41 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x0)

15:39:41 executing program 1:
shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffc000/0x2000)=nil)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x8, @mcast2, 0x87}, r1}}, 0x30)

15:39:41 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x200a42, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000140)={0x0}}, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400140, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x501200, 0x0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000100))
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)

15:39:42 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18)

15:39:42 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async)

15:39:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x4}}]}, 0x6c}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000680)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x4}}]}, 0x6c}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r9=>0x0})
r10 = socket$inet_udp(0x2, 0x2, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000680)={'team0\x00', <r13=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r11, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r12, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x4}}]}, 0x6c}}, 0x0) (async)
r14 = socket$inet_udp(0x2, 0x2, 0x0)
r15 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r16 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000680)={'team0\x00', <r17=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r15, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r16, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x4}}]}, 0x6c}}, 0x0) (async)
r18 = socket$inet_udp(0x2, 0x2, 0x0)
r19 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r20 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r18, 0x8933, &(0x7f0000000680)={'team0\x00', <r21=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r19, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r20, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r21}, {0x4}}]}, 0x6c}}, 0x0) (async)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000080)={0x928, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4dcf9c38}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x98}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8000, 0xff, 0x0, 0x7fff}, {0xfff, 0x86, 0x81, 0x1f}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xae}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xd3f2}}}]}}, {{0x8, 0x1, r13}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r21}}}]}}, {{0x8}, {0x58, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xfff7, 0xe0, 0x40}, {0xda, 0x9, 0x2, 0x3f}, {0x9, 0x6, 0xc2, 0x1}, {0x8, 0xff, 0x1, 0x5}]}}}]}}]}, 0x928}, 0x1, 0x0, 0x0, 0x40004}, 0x44011)

15:39:42 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x200a42, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000140)={0x0}}, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400140, 0x0) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x501200, 0x0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000100)) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)

15:39:42 executing program 1:
select(0x40, &(0x7f0000000000)={0x1, 0x1, 0x3ce, 0x7e04d6ee, 0x2, 0x6e4, 0x5, 0xfffffffffffffffe}, &(0x7f0000000040)={0xbb, 0x7, 0x700000000000, 0x9, 0x9, 0x10000, 0xffffffffffffffff, 0x800}, &(0x7f0000000080)={0xc13f, 0x4, 0xfff, 0x101, 0x8, 0xffffffff, 0x5, 0x5}, &(0x7f00000000c0)={0x77359400})
getpgid(0xffffffffffffffff)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
select(0x40, &(0x7f0000000100)={0x6, 0xfffffffffffffffe, 0x8000, 0x9, 0x1, 0x9, 0x5, 0xfffffffffffffffe}, &(0x7f0000000140)={0x401, 0x4, 0x10001, 0x0, 0x3ff, 0x5, 0x7}, &(0x7f0000000180)={0x1f, 0x4, 0x4, 0x2, 0x9, 0xfa, 0x0, 0x5b}, &(0x7f00000001c0))
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000200)={0x0, 0x101, 0x6, 0x0, 0x1, 0x84, 0x401, 0x1, 0x2, 0x2527, 0x1f, 0xef})
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)

15:39:42 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18)

15:39:42 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000480)={0x16, 0x98, 0xfa00, {&(0x7f0000000440), 0x4, r4, 0x10, 0x1, @ib={0x1b, 0x4, 0x800, {"f1b6648fbac105d7d11d7d288766ce40"}, 0x7fffffff, 0x7fffffffffffffff, 0x4}}}, 0xa0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000940)={0x18}, 0x18)
ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000003c0))
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, r6}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={<r7=>0xffffffffffffffff}, 0x2, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000380)={0xa, 0x4, 0xfa00, {r7}}, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={<r8=>0xffffffffffffffff}, 0x13f, 0x5}}, 0x20)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140)={<r9=>0x0}, &(0x7f0000000200)=0xc)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r1}, 0x8)
ioctl$SG_BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000000)={'\x00', 0xf, 0x400, 0x4, 0x7, 0x2, r9})
r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r8}}, 0x18)

15:39:42 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async)

15:39:42 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x200a42, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000140)={0x0}}, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400140, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x501200, 0x0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000100))
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x200a42, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000140)={0x0}}, 0x0) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400140, 0x0) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x501200, 0x0) (async)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000100)) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)

15:39:42 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18)

15:39:42 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x840)

15:39:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000000))
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1})

15:39:42 executing program 1:
select(0x40, &(0x7f0000000000)={0x1, 0x1, 0x3ce, 0x7e04d6ee, 0x2, 0x6e4, 0x5, 0xfffffffffffffffe}, &(0x7f0000000040)={0xbb, 0x7, 0x700000000000, 0x9, 0x9, 0x10000, 0xffffffffffffffff, 0x800}, &(0x7f0000000080)={0xc13f, 0x4, 0xfff, 0x101, 0x8, 0xffffffff, 0x5, 0x5}, &(0x7f00000000c0)={0x77359400})
getpgid(0xffffffffffffffff)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
select(0x40, &(0x7f0000000100)={0x6, 0xfffffffffffffffe, 0x8000, 0x9, 0x1, 0x9, 0x5, 0xfffffffffffffffe}, &(0x7f0000000140)={0x401, 0x4, 0x10001, 0x0, 0x3ff, 0x5, 0x7}, &(0x7f0000000180)={0x1f, 0x4, 0x4, 0x2, 0x9, 0xfa, 0x0, 0x5b}, &(0x7f00000001c0))
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000200)={0x0, 0x101, 0x6, 0x0, 0x1, 0x84, 0x401, 0x1, 0x2, 0x2527, 0x1f, 0xef})
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)
select(0x40, &(0x7f0000000000)={0x1, 0x1, 0x3ce, 0x7e04d6ee, 0x2, 0x6e4, 0x5, 0xfffffffffffffffe}, &(0x7f0000000040)={0xbb, 0x7, 0x700000000000, 0x9, 0x9, 0x10000, 0xffffffffffffffff, 0x800}, &(0x7f0000000080)={0xc13f, 0x4, 0xfff, 0x101, 0x8, 0xffffffff, 0x5, 0x5}, &(0x7f00000000c0)={0x77359400}) (async)
getpgid(0xffffffffffffffff) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
select(0x40, &(0x7f0000000100)={0x6, 0xfffffffffffffffe, 0x8000, 0x9, 0x1, 0x9, 0x5, 0xfffffffffffffffe}, &(0x7f0000000140)={0x401, 0x4, 0x10001, 0x0, 0x3ff, 0x5, 0x7}, &(0x7f0000000180)={0x1f, 0x4, 0x4, 0x2, 0x9, 0xfa, 0x0, 0x5b}, &(0x7f00000001c0)) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000200)={0x0, 0x101, 0x6, 0x0, 0x1, 0x84, 0x401, 0x1, 0x2, 0x2527, 0x1f, 0xef}) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30) (async)

15:39:42 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x840)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x840) (async)

15:39:42 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000480)={0x16, 0x98, 0xfa00, {&(0x7f0000000440), 0x4, r4, 0x10, 0x1, @ib={0x1b, 0x4, 0x800, {"f1b6648fbac105d7d11d7d288766ce40"}, 0x7fffffff, 0x7fffffffffffffff, 0x4}}}, 0xa0) (async)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000003c0)) (async)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, r6}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={<r7=>0xffffffffffffffff}, 0x2, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000380)={0xa, 0x4, 0xfa00, {r7}}, 0xc) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={<r8=>0xffffffffffffffff}, 0x13f, 0x5}}, 0x20)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140)={<r9=>0x0}, &(0x7f0000000200)=0xc) (async)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r1}, 0x8)
ioctl$SG_BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000000)={'\x00', 0xf, 0x400, 0x4, 0x7, 0x2, r9}) (async)
r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r8}}, 0x18)

15:39:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000000))
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1})
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000000)) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) (async)

15:39:42 executing program 5:
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000000)=0xd, 0x4)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:42 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil})
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xe10b, @rand_addr=' \x01\x00', 0x1}}}, 0x30)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc)

15:39:42 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x840)

15:39:42 executing program 1:
select(0x40, &(0x7f0000000000)={0x1, 0x1, 0x3ce, 0x7e04d6ee, 0x2, 0x6e4, 0x5, 0xfffffffffffffffe}, &(0x7f0000000040)={0xbb, 0x7, 0x700000000000, 0x9, 0x9, 0x10000, 0xffffffffffffffff, 0x800}, &(0x7f0000000080)={0xc13f, 0x4, 0xfff, 0x101, 0x8, 0xffffffff, 0x5, 0x5}, &(0x7f00000000c0)={0x77359400})
getpgid(0xffffffffffffffff)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
select(0x40, &(0x7f0000000100)={0x6, 0xfffffffffffffffe, 0x8000, 0x9, 0x1, 0x9, 0x5, 0xfffffffffffffffe}, &(0x7f0000000140)={0x401, 0x4, 0x10001, 0x0, 0x3ff, 0x5, 0x7}, &(0x7f0000000180)={0x1f, 0x4, 0x4, 0x2, 0x9, 0xfa, 0x0, 0x5b}, &(0x7f00000001c0))
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000200)={0x0, 0x101, 0x6, 0x0, 0x1, 0x84, 0x401, 0x1, 0x2, 0x2527, 0x1f, 0xef})
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)
select(0x40, &(0x7f0000000000)={0x1, 0x1, 0x3ce, 0x7e04d6ee, 0x2, 0x6e4, 0x5, 0xfffffffffffffffe}, &(0x7f0000000040)={0xbb, 0x7, 0x700000000000, 0x9, 0x9, 0x10000, 0xffffffffffffffff, 0x800}, &(0x7f0000000080)={0xc13f, 0x4, 0xfff, 0x101, 0x8, 0xffffffff, 0x5, 0x5}, &(0x7f00000000c0)={0x77359400}) (async)
getpgid(0xffffffffffffffff) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
select(0x40, &(0x7f0000000100)={0x6, 0xfffffffffffffffe, 0x8000, 0x9, 0x1, 0x9, 0x5, 0xfffffffffffffffe}, &(0x7f0000000140)={0x401, 0x4, 0x10001, 0x0, 0x3ff, 0x5, 0x7}, &(0x7f0000000180)={0x1f, 0x4, 0x4, 0x2, 0x9, 0xfa, 0x0, 0x5b}, &(0x7f00000001c0)) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000200)={0x0, 0x101, 0x6, 0x0, 0x1, 0x84, 0x401, 0x1, 0x2, 0x2527, 0x1f, 0xef}) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30) (async)

15:39:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000000))
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1})
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000000)) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) (async)

15:39:42 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18, 0x71, 0x0, {{0x80}, 0x8}}, 0x18)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x1)

15:39:42 executing program 5:
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) (async)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000000)=0xd, 0x4) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:42 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000480)={0x16, 0x98, 0xfa00, {&(0x7f0000000440), 0x4, r4, 0x10, 0x1, @ib={0x1b, 0x4, 0x800, {"f1b6648fbac105d7d11d7d288766ce40"}, 0x7fffffff, 0x7fffffffffffffff, 0x4}}}, 0xa0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000003c0)) (async)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, r6}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={<r7=>0xffffffffffffffff}, 0x2, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000380)={0xa, 0x4, 0xfa00, {r7}}, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={<r8=>0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) (async)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140)={<r9=>0x0}, &(0x7f0000000200)=0xc) (async)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r1}, 0x8)
ioctl$SG_BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000000)={'\x00', 0xf, 0x400, 0x4, 0x7, 0x2, r9})
r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r8}}, 0x18)

15:39:42 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18, 0x71, 0x0, {{0x80}, 0x8}}, 0x18)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x1)

15:39:42 executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18, 0x71, 0x0, {{}, 0x3}}, 0x18)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000000))
write$P9_RATTACH(r0, &(0x7f0000000100)={0x14, 0x69, 0x2, {0x0, 0x2, 0x3}}, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4000)
write$P9_RAUTH(r2, &(0x7f00000000c0)={0x14, 0x67, 0x2, {0x2, 0x0, 0x7}}, 0x14)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x4011, r1, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)

15:39:42 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil})
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xe10b, @rand_addr=' \x01\x00', 0x1}}}, 0x30)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xe10b, @rand_addr=' \x01\x00', 0x1}}}, 0x30) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)
write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc) (async)

15:39:42 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x10000, @private1, 0x7fffffff}, @in6={0xa, 0x4e21, 0x81, @empty, 0x7ff}}}, 0x118)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x30)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x0, {0xa, 0x4e22, 0x6, @mcast1, 0x100}, r3}}, 0x38)

15:39:42 executing program 5:
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) (async)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000000)=0xd, 0x4)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:42 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18, 0x71, 0x0, {{0x80}, 0x8}}, 0x18)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x1)

15:39:42 executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18, 0x71, 0x0, {{}, 0x3}}, 0x18)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000000))
write$P9_RATTACH(r0, &(0x7f0000000100)={0x14, 0x69, 0x2, {0x0, 0x2, 0x3}}, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4000)
write$P9_RAUTH(r2, &(0x7f00000000c0)={0x14, 0x67, 0x2, {0x2, 0x0, 0x7}}, 0x14)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x4011, r1, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18, 0x71, 0x0, {{}, 0x3}}, 0x18) (async)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000000)) (async)
write$P9_RATTACH(r0, &(0x7f0000000100)={0x14, 0x69, 0x2, {0x0, 0x2, 0x3}}, 0x14) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$9p(&(0x7f0000000080), 0x4000) (async)
write$P9_RAUTH(r2, &(0x7f00000000c0)={0x14, 0x67, 0x2, {0x2, 0x0, 0x7}}, 0x14) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x4011, r1, 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)

15:39:42 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0xff40, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x39}}, 0x76)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:42 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x10000, @private1, 0x7fffffff}, @in6={0xa, 0x4e21, 0x81, @empty, 0x7ff}}}, 0x118) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x30) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x0, {0xa, 0x4e22, 0x6, @mcast1, 0x100}, r3}}, 0x38)

15:39:42 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xe10b, @rand_addr=' \x01\x00', 0x1}}}, 0x30) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)
write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc)

15:39:42 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000040)=0x2, 0x4)

15:39:42 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000100)={0x8, 0x0, [{0x4, 0x80, 0x7f, [0x1, 0x1, 0xfffffffe, 0x1f, 0x9, 0xb378, 0x4080, 0x9]}, {0x3, 0x400, 0x6, [0x400, 0x5, 0x10001, 0x4, 0xfffff11c, 0x3, 0x0, 0x8]}, {0x4, 0x1, 0x3ff, [0x63ba, 0xffff, 0x101, 0xff, 0x9, 0x80, 0x3ff, 0x3]}, {0x2, 0x16, 0x80000000, [0x9, 0x9, 0x1000, 0x3, 0x6, 0x20, 0x9, 0x80]}, {0x80, 0xfffeffff, 0xffff, [0x0, 0x80, 0x6, 0x3ed7, 0x4, 0xee02, 0x7f, 0x2]}, {0x1, 0x9, 0xffffffff, [0x3, 0x5, 0x6, 0x0, 0x6, 0x4, 0x4, 0x20]}, {0xffffffff, 0x8, 0x4, [0x9, 0x4, 0x7fffffff, 0x2, 0xe3, 0x5, 0xfffffffe, 0x8]}, {0x80, 0x7ff, 0x6c47047c, [0x0, 0x9, 0x25e44330, 0xab92, 0x3, 0xfa7, 0x40, 0x1f81]}]})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000810}, 0x4)

15:39:42 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0xff40, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x39}}, 0x76)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0xff40, 0xfa00, {0x0, &(0x7f0000000180), 0x39}}, 0x76) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)

15:39:42 executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18, 0x71, 0x0, {{}, 0x3}}, 0x18)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000000))
write$P9_RATTACH(r0, &(0x7f0000000100)={0x14, 0x69, 0x2, {0x0, 0x2, 0x3}}, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4000)
write$P9_RAUTH(r2, &(0x7f00000000c0)={0x14, 0x67, 0x2, {0x2, 0x0, 0x7}}, 0x14)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x4011, r1, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18, 0x71, 0x0, {{}, 0x3}}, 0x18) (async)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000000)) (async)
write$P9_RATTACH(r0, &(0x7f0000000100)={0x14, 0x69, 0x2, {0x0, 0x2, 0x3}}, 0x14) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$9p(&(0x7f0000000080), 0x4000) (async)
write$P9_RAUTH(r2, &(0x7f00000000c0)={0x14, 0x67, 0x2, {0x2, 0x0, 0x7}}, 0x14) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x4011, r1, 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)

15:39:42 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) (async)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000040)=0x2, 0x4)

15:39:42 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async, rerun: 64)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async, rerun: 64)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000100)={0x8, 0x0, [{0x4, 0x80, 0x7f, [0x1, 0x1, 0xfffffffe, 0x1f, 0x9, 0xb378, 0x4080, 0x9]}, {0x3, 0x400, 0x6, [0x400, 0x5, 0x10001, 0x4, 0xfffff11c, 0x3, 0x0, 0x8]}, {0x4, 0x1, 0x3ff, [0x63ba, 0xffff, 0x101, 0xff, 0x9, 0x80, 0x3ff, 0x3]}, {0x2, 0x16, 0x80000000, [0x9, 0x9, 0x1000, 0x3, 0x6, 0x20, 0x9, 0x80]}, {0x80, 0xfffeffff, 0xffff, [0x0, 0x80, 0x6, 0x3ed7, 0x4, 0xee02, 0x7f, 0x2]}, {0x1, 0x9, 0xffffffff, [0x3, 0x5, 0x6, 0x0, 0x6, 0x4, 0x4, 0x20]}, {0xffffffff, 0x8, 0x4, [0x9, 0x4, 0x7fffffff, 0x2, 0xe3, 0x5, 0xfffffffe, 0x8]}, {0x80, 0x7ff, 0x6c47047c, [0x0, 0x9, 0x25e44330, 0xab92, 0x3, 0xfa7, 0x40, 0x1f81]}]})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000810}, 0x4)

15:39:42 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0x4, {0x3, 0xb934, "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", 0x6, 0x80, 0x0, 0x8d, 0x40, 0x8, 0x8, 0x1}, r1}}, 0x128)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
openat$cgroup_int(r2, &(0x7f0000000200)='cgroup.max.descendants\x00', 0x2, 0x0)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x1, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e23, @empty}}}, 0xa0)

15:39:42 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000040)=0x2, 0x4)

15:39:42 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x10000, @private1, 0x7fffffff}, @in6={0xa, 0x4e21, 0x81, @empty, 0x7ff}}}, 0x118)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x30)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x0, {0xa, 0x4e22, 0x6, @mcast1, 0x100}, r3}}, 0x38)

15:39:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000001, 0x10010, r0, 0xc9bf6000)

15:39:42 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async, rerun: 32)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (rerun: 32)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000100)={0x8, 0x0, [{0x4, 0x80, 0x7f, [0x1, 0x1, 0xfffffffe, 0x1f, 0x9, 0xb378, 0x4080, 0x9]}, {0x3, 0x400, 0x6, [0x400, 0x5, 0x10001, 0x4, 0xfffff11c, 0x3, 0x0, 0x8]}, {0x4, 0x1, 0x3ff, [0x63ba, 0xffff, 0x101, 0xff, 0x9, 0x80, 0x3ff, 0x3]}, {0x2, 0x16, 0x80000000, [0x9, 0x9, 0x1000, 0x3, 0x6, 0x20, 0x9, 0x80]}, {0x80, 0xfffeffff, 0xffff, [0x0, 0x80, 0x6, 0x3ed7, 0x4, 0xee02, 0x7f, 0x2]}, {0x1, 0x9, 0xffffffff, [0x3, 0x5, 0x6, 0x0, 0x6, 0x4, 0x4, 0x20]}, {0xffffffff, 0x8, 0x4, [0x9, 0x4, 0x7fffffff, 0x2, 0xe3, 0x5, 0xfffffffe, 0x8]}, {0x80, 0x7ff, 0x6c47047c, [0x0, 0x9, 0x25e44330, 0xab92, 0x3, 0xfa7, 0x40, 0x1f81]}]}) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1) (rerun: 64)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000810}, 0x4)

15:39:42 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0xff40, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x39}}, 0x76) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:42 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0x4, {0x3, 0xb934, "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", 0x6, 0x80, 0x0, 0x8d, 0x40, 0x8, 0x8, 0x1}, r1}}, 0x128) (async, rerun: 32)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async, rerun: 32)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
openat$cgroup_int(r2, &(0x7f0000000200)='cgroup.max.descendants\x00', 0x2, 0x0) (async, rerun: 64)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async, rerun: 64)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async, rerun: 64)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x1, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e23, @empty}}}, 0xa0) (rerun: 64)

15:39:42 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:42 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
timer_create(0x7, 0x0, &(0x7f0000000400)=<r2=>0x0)
timer_delete(r2)
timer_getoverrun(r2)
timer_create(0x5, &(0x7f00000000c0)={0x0, 0x26, 0x4}, &(0x7f0000000100)=<r3=>0x0)
timer_delete(r3)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18, 0x71, 0xfffe, {{0x0, 0x0, 0x2}, 0x4}}, 0xfffffffffffffefb)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x106, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @mcast2, 0x3}, r1}}, 0xfffffffffffffcae)

15:39:42 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r4}}, 0xc)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000001, 0x10010, r0, 0xc9bf6000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000001, 0x10010, r0, 0xc9bf6000) (async)

15:39:43 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:43 executing program 4:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000240))
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
r3 = socket(0x38, 0x800, 0xfffffffd)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c5}, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf250300000008000a0002000000050021000000000006001a004e21000008000a0003000000050012008100000008001700274b50b7ed263825a56c43e051beb3b674076f8cc748deb6d819ee2a9a4381da4f07dbfb5e08342aec671b0e8de3ff607d913699327d05706562471221d62a93fb95fa8b7e010832b9ce5ac360820340e7a6c87fc3df32ae99bfc74fce34c168c48a89847cf824fb41da38d152c8a20fe650f542897d1ec3cd79e3630208414463cfbea01a29841ea6fdccb1c5797b0f47ea66ab8d07907bf966fcd91c7e3bd6b61cb28a", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4000011}, 0x40080)
r6 = accept4$nfc_llcp(r1, &(0x7f0000000100), &(0x7f00000004c0)=0x60, 0x80800)
setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f0000000500), 0x4)

15:39:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000001, 0x10010, r0, 0xc9bf6000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000001, 0x10010, r0, 0xc9bf6000) (async)

15:39:43 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
timer_create(0x7, 0x0, &(0x7f0000000400)=<r2=>0x0)
timer_delete(r2)
timer_getoverrun(r2)
timer_create(0x5, &(0x7f00000000c0)={0x0, 0x26, 0x4}, &(0x7f0000000100)=<r3=>0x0)
timer_delete(r3)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18, 0x71, 0xfffe, {{0x0, 0x0, 0x2}, 0x4}}, 0xfffffffffffffefb)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x106, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @mcast2, 0x3}, r1}}, 0xfffffffffffffcae)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async)
timer_create(0x7, 0x0, &(0x7f0000000400)) (async)
timer_delete(r2) (async)
timer_getoverrun(r2) (async)
timer_create(0x5, &(0x7f00000000c0)={0x0, 0x26, 0x4}, &(0x7f0000000100)) (async)
timer_delete(r3) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18, 0x71, 0xfffe, {{0x0, 0x0, 0x2}, 0x4}}, 0xfffffffffffffefb) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x106, 0x5}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @mcast2, 0x3}, r1}}, 0xfffffffffffffcae) (async)

15:39:43 executing program 4:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000240)) (async)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
r3 = socket(0x38, 0x800, 0xfffffffd) (async)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c5}, 0x0) (async)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf250300000008000a0002000000050021000000000006001a004e21000008000a0003000000050012008100000008001700274b50b7ed263825a56c43e051beb3b674076f8cc748deb6d819ee2a9a4381da4f07dbfb5e08342aec671b0e8de3ff607d913699327d05706562471221d62a93fb95fa8b7e010832b9ce5ac360820340e7a6c87fc3df32ae99bfc74fce34c168c48a89847cf824fb41da38d152c8a20fe650f542897d1ec3cd79e3630208414463cfbea01a29841ea6fdccb1c5797b0f47ea66ab8d07907bf966fcd91c7e3bd6b61cb28a", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4000011}, 0x40080) (async)
r6 = accept4$nfc_llcp(r1, &(0x7f0000000100), &(0x7f00000004c0)=0x60, 0x80800)
setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f0000000500), 0x4)

15:39:43 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:43 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r4}}, 0xc)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r4}}, 0xc) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)

15:39:43 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0x4, {0x3, 0xb934, "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", 0x6, 0x80, 0x0, 0x8d, 0x40, 0x8, 0x8, 0x1}, r1}}, 0x128) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async, rerun: 32)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async, rerun: 32)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
openat$cgroup_int(r2, &(0x7f0000000200)='cgroup.max.descendants\x00', 0x2, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (async)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x1, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e23, @empty}}}, 0xa0)

15:39:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000040), r1)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)

15:39:43 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x7}, 0x4)
ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x4000010, r0, 0x98539000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x22002, 0x0)
timer_create(0x4, &(0x7f00000002c0)={0x0, 0x14, 0x1, @thr={&(0x7f0000000100)="3af3f1c4776a98545a02636aa8357df661453c1612bbdc8eae5d955a7d125229080e870a2afacf302f27b5193d41131ed9f3ed6c58db0f7185f02fb4ac454b3aed910a71edefb6ccb3a84567bb8c0f5457202056069c282d7192dd82640e0cc7fd7135d12545206ff9758bb91fd2e24f612af3367380baf5b8f9c72a8650d43b665f5a6d4c75f68f1a97181f8cf1230e14a85e9878281f78", &(0x7f00000001c0)="3bf81b81abd171640256f3104b07f9b9922af51f4e3117e5cca93c5928a52433c2772d23c44f64136ae8c73acb144f8383738eeb49b621d94daaadaddcd02d5b78d48efa319a5a01096d0011f6ee2bfbaafb955d767873faabb887815d026f03c00912d82711b95a50306321603fd852b531c2b01996559935130bad970e4f8ac175deec9448a85d23b471cc1aaf24551a598bb4734bf7ec2bb7af8cac42f8664806e236cbd6b851821845ae2ada0ad52875dd5253ef8775b2a85bdb125521992d4e6f53d44fb0ddd2579954fe1cb3fd9f9383764058b89f746ee573a14617dbad1809a82c5c38b0fc31f64b1e11d1919a410e72"}}, &(0x7f0000000300)=<r1=>0x0)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6b}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x801)
timer_gettime(r1, &(0x7f0000000340))
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18, 0x71, 0x0, {{0x0, 0x0, 0x8000000000}}}, 0x18)
setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000040)=0xf, 0x4)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x810)
pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000400)=0x3)

15:39:43 executing program 4:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000240)) (async)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
r3 = socket(0x38, 0x800, 0xfffffffd) (async)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c5}, 0x0) (async)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf250300000008000a0002000000050021000000000006001a004e21000008000a0003000000050012008100000008001700274b50b7ed263825a56c43e051beb3b674076f8cc748deb6d819ee2a9a4381da4f07dbfb5e08342aec671b0e8de3ff607d913699327d05706562471221d62a93fb95fa8b7e010832b9ce5ac360820340e7a6c87fc3df32ae99bfc74fce34c168c48a89847cf824fb41da38d152c8a20fe650f542897d1ec3cd79e3630208414463cfbea01a29841ea6fdccb1c5797b0f47ea66ab8d07907bf966fcd91c7e3bd6b61cb28a", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4000011}, 0x40080) (async)
r6 = accept4$nfc_llcp(r1, &(0x7f0000000100), &(0x7f00000004c0)=0x60, 0x80800)
setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f0000000500), 0x4)

15:39:43 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20) (async)
timer_create(0x7, 0x0, &(0x7f0000000400)=<r2=>0x0)
timer_delete(r2) (async, rerun: 32)
timer_getoverrun(r2) (async, rerun: 32)
timer_create(0x5, &(0x7f00000000c0)={0x0, 0x26, 0x4}, &(0x7f0000000100)=<r3=>0x0)
timer_delete(r3)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18, 0x71, 0xfffe, {{0x0, 0x0, 0x2}, 0x4}}, 0xfffffffffffffefb) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x106, 0x5}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @mcast2, 0x3}, r1}}, 0xfffffffffffffcae)

15:39:43 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r4}}, 0xc) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000040), r1)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)

15:39:43 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x7}, 0x4) (async)
ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) (async)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x4000010, r0, 0x98539000) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x22002, 0x0) (async)
timer_create(0x4, &(0x7f00000002c0)={0x0, 0x14, 0x1, @thr={&(0x7f0000000100)="3af3f1c4776a98545a02636aa8357df661453c1612bbdc8eae5d955a7d125229080e870a2afacf302f27b5193d41131ed9f3ed6c58db0f7185f02fb4ac454b3aed910a71edefb6ccb3a84567bb8c0f5457202056069c282d7192dd82640e0cc7fd7135d12545206ff9758bb91fd2e24f612af3367380baf5b8f9c72a8650d43b665f5a6d4c75f68f1a97181f8cf1230e14a85e9878281f78", &(0x7f00000001c0)="3bf81b81abd171640256f3104b07f9b9922af51f4e3117e5cca93c5928a52433c2772d23c44f64136ae8c73acb144f8383738eeb49b621d94daaadaddcd02d5b78d48efa319a5a01096d0011f6ee2bfbaafb955d767873faabb887815d026f03c00912d82711b95a50306321603fd852b531c2b01996559935130bad970e4f8ac175deec9448a85d23b471cc1aaf24551a598bb4734bf7ec2bb7af8cac42f8664806e236cbd6b851821845ae2ada0ad52875dd5253ef8775b2a85bdb125521992d4e6f53d44fb0ddd2579954fe1cb3fd9f9383764058b89f746ee573a14617dbad1809a82c5c38b0fc31f64b1e11d1919a410e72"}}, &(0x7f0000000300)=<r1=>0x0)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6b}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x801) (async)
timer_gettime(r1, &(0x7f0000000340)) (async)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18, 0x71, 0x0, {{0x0, 0x0, 0x8000000000}}}, 0x18) (async)
setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000040)=0xf, 0x4) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x810) (async)
pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000400)=0x3)

15:39:43 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x26}, 0x4}, r3}}, 0x30)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000940)={0x18}, 0x18)
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x3)
write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x2, {0x0, 0x5, "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", 0x6, 0x5, 0x9, 0x5, 0x6, 0x6, 0xfb, 0x1}, r1}}, 0x128)

15:39:43 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = accept4$nfc_llcp(r0, 0x0, &(0x7f0000000040), 0xc00)
accept4$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000080)=0x60, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000180))
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:43 executing program 1:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

15:39:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000040), r1) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)

15:39:43 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r2})
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:43 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = accept4$nfc_llcp(r0, 0x0, &(0x7f0000000040), 0xc00)
accept4$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000080)=0x60, 0x0) (async)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000180)) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:43 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x7}, 0x4) (async)
ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) (async)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x4000010, r0, 0x98539000) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x22002, 0x0) (async)
timer_create(0x4, &(0x7f00000002c0)={0x0, 0x14, 0x1, @thr={&(0x7f0000000100)="3af3f1c4776a98545a02636aa8357df661453c1612bbdc8eae5d955a7d125229080e870a2afacf302f27b5193d41131ed9f3ed6c58db0f7185f02fb4ac454b3aed910a71edefb6ccb3a84567bb8c0f5457202056069c282d7192dd82640e0cc7fd7135d12545206ff9758bb91fd2e24f612af3367380baf5b8f9c72a8650d43b665f5a6d4c75f68f1a97181f8cf1230e14a85e9878281f78", &(0x7f00000001c0)="3bf81b81abd171640256f3104b07f9b9922af51f4e3117e5cca93c5928a52433c2772d23c44f64136ae8c73acb144f8383738eeb49b621d94daaadaddcd02d5b78d48efa319a5a01096d0011f6ee2bfbaafb955d767873faabb887815d026f03c00912d82711b95a50306321603fd852b531c2b01996559935130bad970e4f8ac175deec9448a85d23b471cc1aaf24551a598bb4734bf7ec2bb7af8cac42f8664806e236cbd6b851821845ae2ada0ad52875dd5253ef8775b2a85bdb125521992d4e6f53d44fb0ddd2579954fe1cb3fd9f9383764058b89f746ee573a14617dbad1809a82c5c38b0fc31f64b1e11d1919a410e72"}}, &(0x7f0000000300)=<r1=>0x0) (async)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6b}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x801)
timer_gettime(r1, &(0x7f0000000340)) (async)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18, 0x71, 0x0, {{0x0, 0x0, 0x8000000000}}}, 0x18)
setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000040)=0xf, 0x4) (async, rerun: 32)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x810) (async, rerun: 32)
pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000400)=0x3)

15:39:43 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x26}, 0x4}, r3}}, 0x30)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000940)={0x18}, 0x18)
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x3)
write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x2, {0x0, 0x5, "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", 0x6, 0x5, 0x9, 0x5, 0x6, 0x6, 0xfb, 0x1}, r1}}, 0x128)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x26}, 0x4}, r3}}, 0x30) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r5, &(0x7f0000000940)={0x18}, 0x18) (async)
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x3) (async)
write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x2, {0x0, 0x5, "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", 0x6, 0x5, 0x9, 0x5, 0x6, 0x6, 0xfb, 0x1}, r1}}, 0x128) (async)

15:39:43 executing program 1:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

15:39:43 executing program 3:
ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000000)=0x80000000)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x42}, 0xfffffef8}, @in6={0xa, 0x4e21, 0x101, @mcast1, 0x3}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @multicast2}], 0x68)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r1, 0x0)

15:39:43 executing program 1:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)

15:39:43 executing program 3:
ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000000)=0x80000000)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x42}, 0xfffffef8}, @in6={0xa, 0x4e21, 0x101, @mcast1, 0x3}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @multicast2}], 0x68)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r1, 0x0)
ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000000)=0x80000000) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x42}, 0xfffffef8}, @in6={0xa, 0x4e21, 0x101, @mcast1, 0x3}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @multicast2}], 0x68) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r1, 0x0) (async)

15:39:43 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = accept4$nfc_llcp(r0, 0x0, &(0x7f0000000040), 0xc00)
accept4$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000080)=0x60, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000180))
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:43 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x12000)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4)

15:39:43 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r2})
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r2}) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)

15:39:43 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x26}, 0x4}, r3}}, 0x30)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000940)={0x18}, 0x18)
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x3)
write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x2, {0x0, 0x5, "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", 0x6, 0x5, 0x9, 0x5, 0x6, 0x6, 0xfb, 0x1}, r1}}, 0x128)

15:39:43 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)

15:39:43 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x12000) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4)

15:39:43 executing program 4:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:43 executing program 3:
ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000000)=0x80000000) (async)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18) (async, rerun: 32)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x42}, 0xfffffef8}, @in6={0xa, 0x4e21, 0x101, @mcast1, 0x3}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @multicast2}], 0x68) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r1, 0x0)

15:39:43 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r2})
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r2}) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)

15:39:43 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000d, 0x4011, r0, 0x0)

15:39:43 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000040)) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)

15:39:43 executing program 4:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)

15:39:43 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x111, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x5)

15:39:43 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x12000) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4)

15:39:43 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000d, 0x4011, r0, 0x0)

15:39:43 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
accept4$nfc_llcp(r2, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80000)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:44 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000040)) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)

15:39:44 executing program 4:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:44 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async, rerun: 64)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 64)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x111, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x5)

15:39:44 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x40040)

15:39:44 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
accept4$nfc_llcp(r2, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80000)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:44 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:44 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = accept$nfc_llcp(r0, &(0x7f0000000040), &(0x7f0000000100)=0x60)
getsockopt$nfc_llcp(r1, 0x118, 0x1, &(0x7f0000000140)=""/51, 0x33)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:44 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000d, 0x4011, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000d, 0x4011, r0, 0x0) (async)

15:39:44 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x40040)

15:39:44 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = accept$nfc_llcp(r0, &(0x7f0000000040), &(0x7f0000000100)=0x60)
getsockopt$nfc_llcp(r1, 0x118, 0x1, &(0x7f0000000140)=""/51, 0x33) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:44 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x40040)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x40040) (async)

15:39:44 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x6}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30) (async)

15:39:44 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x404800)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:44 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
accept4$nfc_llcp(r2, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80000)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
accept4$nfc_llcp(r2, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80000) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)

15:39:44 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x111, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x5)

15:39:44 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = accept$nfc_llcp(r0, &(0x7f0000000040), &(0x7f0000000100)=0x60)
getsockopt$nfc_llcp(r1, 0x118, 0x1, &(0x7f0000000140)=""/51, 0x33) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:44 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000000))
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x10001)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:44 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x404800)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:44 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x6}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30) (async)

15:39:44 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x1, {0x5, 0xff, "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", 0x81, 0x9, 0x80, 0x40, 0x1, 0x80, 0x1, 0x1}, r1}}, 0x128)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0x1, {0x6, 0x401, "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", 0x9, 0x1, 0xff, 0x1f, 0x0, 0x1, 0x0, 0x1}, r1}}, 0x128)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:44 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000000))
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x10001) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:44 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000000))
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x10001)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000000)) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) (async)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x10001) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)

15:39:44 executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8001}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000040)={0xe1, 0x75, 0x1, {0xd6, "4635cd6ec8b303c557e411a807f2639907abf7b38ac04a463ec08d38216fc96a778f72a62c0b226e63c3522cb53b57a107644bb3371722f57494ee01278887fda5a9a85f624e257534d70a3247dee28663f15f736fa2d2c1d6e8a62bb9dfef19c304b82f857719a974be92cead84b7667356d8f74bb6675bd31522e1887d70ade1bae14ca623e24800fd9e620ccc50cf72a77ddfca1e8f57f460ab738497bb27b7c2c81212df4b3a378129eba2af74b2de82f4da473d279a2ad79dcd590755412b570898af2f96611c5e612c09871c7e251c291dd1c0"}}, 0xe1)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x85)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x201400, 0x0)
mmap$dsp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000008, 0x810, r1, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x30)

15:39:44 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x404800)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x404800) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)

15:39:44 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x2000800}, 0x1)

15:39:44 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x1, {0x5, 0xff, "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", 0x81, 0x9, 0x80, 0x40, 0x1, 0x80, 0x1, 0x1}, r1}}, 0x128) (async)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0x1, {0x6, 0x401, "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", 0x9, 0x1, 0xff, 0x1f, 0x0, 0x1, 0x0, 0x1}, r1}}, 0x128) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:44 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000300))
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$apparmor_exec(r3, &(0x7f0000000400)={'stack ', '\x00'}, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x401}], &(0x7f0000000040)='GPL\x00', 0x2, 0x97, &(0x7f0000000080)=""/151, 0x40f00, 0x8, '\x00', 0x0, 0xd, r3, 0x8, &(0x7f0000000140)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x0, 0x54, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x80)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:44 executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8001}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async)
munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) (async)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000040)={0xe1, 0x75, 0x1, {0xd6, "4635cd6ec8b303c557e411a807f2639907abf7b38ac04a463ec08d38216fc96a778f72a62c0b226e63c3522cb53b57a107644bb3371722f57494ee01278887fda5a9a85f624e257534d70a3247dee28663f15f736fa2d2c1d6e8a62bb9dfef19c304b82f857719a974be92cead84b7667356d8f74bb6675bd31522e1887d70ade1bae14ca623e24800fd9e620ccc50cf72a77ddfca1e8f57f460ab738497bb27b7c2c81212df4b3a378129eba2af74b2de82f4da473d279a2ad79dcd590755412b570898af2f96611c5e612c09871c7e251c291dd1c0"}}, 0xe1) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x85)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x201400, 0x0)
mmap$dsp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000008, 0x810, r1, 0x0) (async)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x30)

15:39:44 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x2000800}, 0x1)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x2000800}, 0x1) (async)

15:39:44 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socketpair(0xa, 0x3, 0xffffff01, &(0x7f0000000000))
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24004095}, 0x40c4044)
getpid()

15:39:44 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13d, 0x6}}, 0x20)

15:39:44 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socketpair(0xa, 0x3, 0xffffff01, &(0x7f0000000000)) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24004095}, 0x40c4044) (async)
getpid()

15:39:44 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000300)) (async, rerun: 64)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (rerun: 64)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async)
write$apparmor_exec(r3, &(0x7f0000000400)={'stack ', '\x00'}, 0x7) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x401}], &(0x7f0000000040)='GPL\x00', 0x2, 0x97, &(0x7f0000000080)=""/151, 0x40f00, 0x8, '\x00', 0x0, 0xd, r3, 0x8, &(0x7f0000000140)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x0, 0x54, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x80) (async, rerun: 32)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:44 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x2000800}, 0x1)

15:39:44 executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8001}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) (async)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000040)={0xe1, 0x75, 0x1, {0xd6, "4635cd6ec8b303c557e411a807f2639907abf7b38ac04a463ec08d38216fc96a778f72a62c0b226e63c3522cb53b57a107644bb3371722f57494ee01278887fda5a9a85f624e257534d70a3247dee28663f15f736fa2d2c1d6e8a62bb9dfef19c304b82f857719a974be92cead84b7667356d8f74bb6675bd31522e1887d70ade1bae14ca623e24800fd9e620ccc50cf72a77ddfca1e8f57f460ab738497bb27b7c2c81212df4b3a378129eba2af74b2de82f4da473d279a2ad79dcd590755412b570898af2f96611c5e612c09871c7e251c291dd1c0"}}, 0xe1) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x85) (async)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x201400, 0x0)
mmap$dsp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000008, 0x810, r1, 0x0) (async)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x30)

15:39:44 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13d, 0x6}}, 0x20)

15:39:44 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x1, {0x5, 0xff, "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", 0x81, 0x9, 0x80, 0x40, 0x1, 0x80, 0x1, 0x1}, r1}}, 0x128) (async)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0x1, {0x6, 0x401, "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", 0x9, 0x1, 0xff, 0x1f, 0x0, 0x1, 0x0, 0x1}, r1}}, 0x128) (async, rerun: 64)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (rerun: 64)

15:39:44 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
getsockopt$nfc_llcp(r0, 0x118, 0x0, &(0x7f0000000100)=""/118, 0x76)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x1)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000))

15:39:44 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socketpair(0xa, 0x3, 0xffffff01, &(0x7f0000000000))
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24004095}, 0x40c4044)
getpid()
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
socketpair(0xa, 0x3, 0xffffff01, &(0x7f0000000000)) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24004095}, 0x40c4044) (async)
getpid() (async)

15:39:44 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13d, 0x6}}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13d, 0x6}}, 0x20) (async)

15:39:44 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = getpgrp(0xffffffffffffffff)
getpgid(r2)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:44 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
getsockopt$nfc_llcp(r0, 0x118, 0x0, &(0x7f0000000100)=""/118, 0x76) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x1)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000))

15:39:44 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x106, 0x6}}, 0x20)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18, 0x71, 0x0, {{0x80}, 0xffffffff}}, 0x18)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1842, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111, 0x6}}, 0xffffffffffffff63)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r4}}, 0x30)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r8, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000480), r1, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r6, 0x0, "372fdc", "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"}}, 0x110)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000380), r6, 0x7}}, 0x18)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8001, @mcast2, 0x6}, r1}}, 0x30)
write$P9_RLERRORu(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2d00000073010020002f70727076340f76732f706d74755f6469736300ff010000362bce093a00"/50], 0x2d)

15:39:44 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffd7f, &(0x7f0000000080)={0x0}}, 0x0)

15:39:44 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000300))
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$apparmor_exec(r3, &(0x7f0000000400)={'stack ', '\x00'}, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x401}], &(0x7f0000000040)='GPL\x00', 0x2, 0x97, &(0x7f0000000080)=""/151, 0x40f00, 0x8, '\x00', 0x0, 0xd, r3, 0x8, &(0x7f0000000140)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x0, 0x54, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x80)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000300)) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async)
write$apparmor_exec(r3, &(0x7f0000000400)={'stack ', '\x00'}, 0x7) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x401}], &(0x7f0000000040)='GPL\x00', 0x2, 0x97, &(0x7f0000000080)=""/151, 0x40f00, 0x8, '\x00', 0x0, 0xd, r3, 0x8, &(0x7f0000000140)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x0, 0x54, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x80) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)

15:39:45 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
getsockopt$nfc_llcp(r0, 0x118, 0x0, &(0x7f0000000100)=""/118, 0x76) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x1) (async)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000))

15:39:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:45 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = getpgrp(0xffffffffffffffff)
getpgid(r2) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:45 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x106, 0x6}}, 0x20)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18, 0x71, 0x0, {{0x80}, 0xffffffff}}, 0x18)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1842, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111, 0x6}}, 0xffffffffffffff63)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r4}}, 0x30)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r8, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000480), r1, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r6, 0x0, "372fdc", "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"}}, 0x110)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000380), r6, 0x7}}, 0x18)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8001, @mcast2, 0x6}, r1}}, 0x30)
write$P9_RLERRORu(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2d00000073010020002f70727076340f76732f706d74755f6469736300ff010000362bce093a00"/50], 0x2d)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106, 0x6}}, 0x20) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18, 0x71, 0x0, {{0x80}, 0xffffffff}}, 0x18) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1842, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x111, 0x6}}, 0xffffffffffffff63) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r4}}, 0x30) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r8, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000480), r1, 0x0, 0x2, 0x4}}, 0x20) (async)
write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r6, 0x0, "372fdc", "ecfa740d50633c3e2cddfb4bc607b8a4dbccc06ab83fb939dde9689282858dba9e5929a3dd429dc63db88542a114b49e4b4008803979919e021d5ab4a6222ce33a83fd84edb144ca541f3968d9016b2038c1e5f2f22f305a532ac9470cbed1c835ad0f913f67bba4218cb880fdafe693223416fbc64058e5bde5e3aaf35d2f4c7a250743c4b233e9448e9723e948632ae679f5d9cf887b0254fd0c1be9cd86238342d4cea29ee7804090557c1ab0acaccb21e14f84070f309ced695a7939eea043fdf1773340cbc7083eeaad373b963da200f915db64dcdea6bc16cc96cf6c64e2a157c01eb4891461cdb7b613380a31c564bac1a196e17d52693a33e96125f8"}}, 0x110) (async)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000380), r6, 0x7}}, 0x18) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8001, @mcast2, 0x6}, r1}}, 0x30) (async)
write$P9_RLERRORu(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2d00000073010020002f70727076340f76732f706d74755f6469736300ff010000362bce093a00"/50], 0x2d) (async)

15:39:45 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffd7f, &(0x7f0000000080)={0x0}}, 0x0)

15:39:45 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)

15:39:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)

15:39:45 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffd7f, &(0x7f0000000080)={0x0}}, 0x0)

15:39:45 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = getpgrp(0xffffffffffffffff)
getpgid(r2)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
getpgrp(0xffffffffffffffff) (async)
getpgid(r2) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)

15:39:45 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r6, &(0x7f0000000940)={0x18}, 0x18)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000680)={0x0, 0x2, 0x0, &(0x7f0000000480)=[{<r7=>0x80000000}, {}], 0xa, 0x0, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000640)=[{}]})
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000007c0)={0x80000000, &(0x7f0000000700), &(0x7f0000000740)=[{{}, {0x80000000, <r8=>0x0}}]})
ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000000800)={{0x80000000, 0x0, 0x6, [0x92, 0x101]}, {r7, r8, 0x4, [0x800, 0xa1]}, 0x1, [0x8, 0x7]})
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r5, 0x1, 0x1, 0x90}}, 0x20)
r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r9, &(0x7f0000000940)={0x18}, 0x18)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r11=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r11, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r9, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r11, 0x3}}, 0x10)
r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r14=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r13, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r14, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r12, &(0x7f0000000440)={0x7, 0x8, 0xfa00, {r14, 0x1}}, 0x10)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r9, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x0, r3, 0x0, 0x0, @ib={0x1b, 0x2, 0x9, {"c7c2b38d18b74a230287f52b7cb56bd2"}, 0x1ff, 0x1, 0x6}}}, 0xa0)
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {r5}}, 0x10)

15:39:45 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)

15:39:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000000)=""/69, 0x45)

15:39:45 executing program 5:
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x11, 0xff, 0x8001, 0xb17, 0xa, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x48)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
pipe2$9p(&(0x7f0000000300), 0x8880)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0xe, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @alu={0x4, 0x0, 0xc, 0x1, 0x6, 0xffffffffffffffec, 0x1}, @jmp={0x5, 0x0, 0xb, 0x6, 0xa1f11dc57fe5ae1c, 0x40, 0x10}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @generic={0x2, 0x5, 0x7, 0x9, 0xffffffe5}, @exit, @map_val={0x18, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x401, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x7, 0xe354f0e, 0xf0c}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0x1, 0x1, r0, r1, r2]}, 0x80)

15:39:45 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x106, 0x6}}, 0x20) (async, rerun: 32)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async, rerun: 32)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18, 0x71, 0x0, {{0x80}, 0xffffffff}}, 0x18) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1842, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111, 0x6}}, 0xffffffffffffff63)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r4}}, 0x30) (async)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20) (async, rerun: 64)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 64)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r8, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000480), r1, 0x0, 0x2, 0x4}}, 0x20) (async)
write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r6, 0x0, "372fdc", "ecfa740d50633c3e2cddfb4bc607b8a4dbccc06ab83fb939dde9689282858dba9e5929a3dd429dc63db88542a114b49e4b4008803979919e021d5ab4a6222ce33a83fd84edb144ca541f3968d9016b2038c1e5f2f22f305a532ac9470cbed1c835ad0f913f67bba4218cb880fdafe693223416fbc64058e5bde5e3aaf35d2f4c7a250743c4b233e9448e9723e948632ae679f5d9cf887b0254fd0c1be9cd86238342d4cea29ee7804090557c1ab0acaccb21e14f84070f309ced695a7939eea043fdf1773340cbc7083eeaad373b963da200f915db64dcdea6bc16cc96cf6c64e2a157c01eb4891461cdb7b613380a31c564bac1a196e17d52693a33e96125f8"}}, 0x110)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000380), r6, 0x7}}, 0x18) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8001, @mcast2, 0x6}, r1}}, 0x30) (async, rerun: 64)
write$P9_RLERRORu(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2d00000073010020002f70727076340f76732f706d74755f6469736300ff010000362bce093a00"/50], 0x2d) (rerun: 64)

15:39:45 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)

15:39:45 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3)
accept$nfc_llcp(r0, &(0x7f00000002c0), &(0x7f0000000140)=0x60)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
socketpair(0x1e, 0x1, 0x8, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x1, 0x0, "298398392501fb09e77326d4bfa246df68df7c9fedc8c6e8ff1b8439159a4399bce163a5613f74f24ba360316002521ed573c540003a127a0e4271c5823e7227f912a33a5f10df9383291f786fff3959"}, 0xd8)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r5, 0x1, 0x1, 0x90}}, 0x20)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r6, &(0x7f0000000940)={0x18}, 0x18)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r6, 0x3)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r7, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), r5, r7}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000000)=""/69, 0x45)

15:39:45 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xfffffd43, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x41)

15:39:45 executing program 5:
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x11, 0xff, 0x8001, 0xb17, 0xa, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x48) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
pipe2$9p(&(0x7f0000000300), 0x8880) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0xe, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @alu={0x4, 0x0, 0xc, 0x1, 0x6, 0xffffffffffffffec, 0x1}, @jmp={0x5, 0x0, 0xb, 0x6, 0xa1f11dc57fe5ae1c, 0x40, 0x10}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @generic={0x2, 0x5, 0x7, 0x9, 0xffffffe5}, @exit, @map_val={0x18, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x401, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x7, 0xe354f0e, 0xf0c}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0x1, 0x1, r0, r1, r2]}, 0x80)

15:39:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000000)=""/69, 0x45)

15:39:45 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async, rerun: 64)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 64)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20) (async, rerun: 32)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async, rerun: 32)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r6, &(0x7f0000000940)={0x18}, 0x18)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000680)={0x0, 0x2, 0x0, &(0x7f0000000480)=[{<r7=>0x80000000}, {}], 0xa, 0x0, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) (async)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000007c0)={0x80000000, &(0x7f0000000700), &(0x7f0000000740)=[{{}, {0x80000000, <r8=>0x0}}]})
ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000000800)={{0x80000000, 0x0, 0x6, [0x92, 0x101]}, {r7, r8, 0x4, [0x800, 0xa1]}, 0x1, [0x8, 0x7]}) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r5, 0x1, 0x1, 0x90}}, 0x20) (async)
r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r9, &(0x7f0000000940)={0x18}, 0x18)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r11=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r11, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_NOTIFY(r9, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r11, 0x3}}, 0x10)
r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r14=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r13, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r14, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_LISTEN(r12, &(0x7f0000000440)={0x7, 0x8, 0xfa00, {r14, 0x1}}, 0x10) (async, rerun: 64)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r9, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x0, r3, 0x0, 0x0, @ib={0x1b, 0x2, 0x9, {"c7c2b38d18b74a230287f52b7cb56bd2"}, 0x1ff, 0x1, 0x6}}}, 0xa0) (async, rerun: 64)
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {r5}}, 0x10)

15:39:45 executing program 5:
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x11, 0xff, 0x8001, 0xb17, 0xa, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x48) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
pipe2$9p(&(0x7f0000000300), 0x8880) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0xe, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @alu={0x4, 0x0, 0xc, 0x1, 0x6, 0xffffffffffffffec, 0x1}, @jmp={0x5, 0x0, 0xb, 0x6, 0xa1f11dc57fe5ae1c, 0x40, 0x10}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @generic={0x2, 0x5, 0x7, 0x9, 0xffffffe5}, @exit, @map_val={0x18, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x401, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x7, 0xe354f0e, 0xf0c}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0x1, 0x1, r0, r1, r2]}, 0x80)

15:39:45 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xfffffd43, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x41)

15:39:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x3, {0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}}, 0x38)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:45 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffff8c56}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000d1}, 0x40010)

15:39:45 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x4}}]}, 0x6c}}, 0x0)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6}, [@alu={0x7, 0x0, 0x1, 0x4, 0xfd182a762134e8c, 0x50, 0xfffffffffffffffc}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @exit, @call={0x85, 0x0, 0x0, 0x6f}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @map_fd={0x18, 0x3}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, @ldst={0x0, 0x2, 0x0, 0x9, 0xa, 0x20, 0x4}]}, &(0x7f0000000200)='GPL\x00', 0x1000, 0x36, &(0x7f0000000240)=""/54, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xc, 0x40000000, 0x9f}, 0x10}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x91}, @ldst={0x3, 0x1, 0x2, 0x1, 0x9, 0x20, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x40f00, 0x11, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000100)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xa, 0xbae, 0x5}, 0x10, 0xffffffffffffffff, r5}, 0x80)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x30)

15:39:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x3, {0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}}, 0x38) (rerun: 32)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) (async, rerun: 64)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x111, 0x2}}, 0x20) (rerun: 64)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r2}}, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:45 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xfffffd43, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x41)

15:39:45 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3)
accept$nfc_llcp(r0, &(0x7f00000002c0), &(0x7f0000000140)=0x60) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
socketpair(0x1e, 0x1, 0x8, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x1, 0x0, "298398392501fb09e77326d4bfa246df68df7c9fedc8c6e8ff1b8439159a4399bce163a5613f74f24ba360316002521ed573c540003a127a0e4271c5823e7227f912a33a5f10df9383291f786fff3959"}, 0xd8) (async)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r5, 0x1, 0x1, 0x90}}, 0x20)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r6, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r6, 0x3) (async)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r7, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), r5, r7}}, 0x18) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:45 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffff8c56}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000d1}, 0x40010)

15:39:45 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20) (async, rerun: 64)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (rerun: 64)
write$P9_ROPEN(r6, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000680)={0x0, 0x2, 0x0, &(0x7f0000000480)=[{<r7=>0x80000000}, {}], 0xa, 0x0, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) (async)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000007c0)={0x80000000, &(0x7f0000000700), &(0x7f0000000740)=[{{}, {0x80000000, <r8=>0x0}}]})
ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000000800)={{0x80000000, 0x0, 0x6, [0x92, 0x101]}, {r7, r8, 0x4, [0x800, 0xa1]}, 0x1, [0x8, 0x7]})
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r5, 0x1, 0x1, 0x90}}, 0x20) (async)
r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r9, &(0x7f0000000940)={0x18}, 0x18)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r11=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r11, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_NOTIFY(r9, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r11, 0x3}}, 0x10) (async, rerun: 32)
r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (rerun: 32)
r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r14=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r13, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r14, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_LISTEN(r12, &(0x7f0000000440)={0x7, 0x8, 0xfa00, {r14, 0x1}}, 0x10)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r9, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x0, r3, 0x0, 0x0, @ib={0x1b, 0x2, 0x9, {"c7c2b38d18b74a230287f52b7cb56bd2"}, 0x1ff, 0x1, 0x6}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {r5}}, 0x10)

15:39:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x3, {0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}}, 0x38)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r2}}, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:45 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x4}}]}, 0x6c}}, 0x0)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6}, [@alu={0x7, 0x0, 0x1, 0x4, 0xfd182a762134e8c, 0x50, 0xfffffffffffffffc}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @exit, @call={0x85, 0x0, 0x0, 0x6f}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @map_fd={0x18, 0x3}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, @ldst={0x0, 0x2, 0x0, 0x9, 0xa, 0x20, 0x4}]}, &(0x7f0000000200)='GPL\x00', 0x1000, 0x36, &(0x7f0000000240)=""/54, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xc, 0x40000000, 0x9f}, 0x10}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x91}, @ldst={0x3, 0x1, 0x2, 0x1, 0x9, 0x20, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x40f00, 0x11, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000100)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xa, 0xbae, 0x5}, 0x10, 0xffffffffffffffff, r5}, 0x80)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x30)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)) (async)
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x4}}]}, 0x6c}}, 0x0) (async)
pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6}, [@alu={0x7, 0x0, 0x1, 0x4, 0xfd182a762134e8c, 0x50, 0xfffffffffffffffc}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @exit, @call={0x85, 0x0, 0x0, 0x6f}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @map_fd={0x18, 0x3}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, @ldst={0x0, 0x2, 0x0, 0x9, 0xa, 0x20, 0x4}]}, &(0x7f0000000200)='GPL\x00', 0x1000, 0x36, &(0x7f0000000240)=""/54, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xc, 0x40000000, 0x9f}, 0x10}, 0x80) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x91}, @ldst={0x3, 0x1, 0x2, 0x1, 0x9, 0x20, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x40f00, 0x11, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000100)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xa, 0xbae, 0x5}, 0x10, 0xffffffffffffffff, r5}, 0x80) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x30) (async)

15:39:45 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffff8c56}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000d1}, 0x40010)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffff8c56}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000d1}, 0x40010) (async)

15:39:45 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
socketpair(0x18, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x6c969d03c1edf7d0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000100)=@ccm_128={{0x303}, "d7705fd3ec623fa7", "93aa6336c8d8a64b0403d1ffd60942dc", "39c8587b", "b63e170bd3267b76"}, 0x28)

15:39:46 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) (async)
accept$nfc_llcp(r0, &(0x7f00000002c0), &(0x7f0000000140)=0x60)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
socketpair(0x1e, 0x1, 0x8, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x1, 0x0, "298398392501fb09e77326d4bfa246df68df7c9fedc8c6e8ff1b8439159a4399bce163a5613f74f24ba360316002521ed573c540003a127a0e4271c5823e7227f912a33a5f10df9383291f786fff3959"}, 0xd8) (async)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r5, 0x1, 0x1, 0x90}}, 0x20) (async)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r6, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r6, 0x3)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r7, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), r5, r7}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:46 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x4}}]}, 0x6c}}, 0x0) (async)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80) (async)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6}, [@alu={0x7, 0x0, 0x1, 0x4, 0xfd182a762134e8c, 0x50, 0xfffffffffffffffc}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @exit, @call={0x85, 0x0, 0x0, 0x6f}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @map_fd={0x18, 0x3}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, @ldst={0x0, 0x2, 0x0, 0x9, 0xa, 0x20, 0x4}]}, &(0x7f0000000200)='GPL\x00', 0x1000, 0x36, &(0x7f0000000240)=""/54, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xc, 0x40000000, 0x9f}, 0x10}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x91}, @ldst={0x3, 0x1, 0x2, 0x1, 0x9, 0x20, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x40f00, 0x11, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000100)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xa, 0xbae, 0x5}, 0x10, 0xffffffffffffffff, r5}, 0x80)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async, rerun: 32)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) (rerun: 32)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x30)

15:39:46 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18) (async)
socketpair(0x18, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x6c969d03c1edf7d0) (async)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000100)=@ccm_128={{0x303}, "d7705fd3ec623fa7", "93aa6336c8d8a64b0403d1ffd60942dc", "39c8587b", "b63e170bd3267b76"}, 0x28)

15:39:46 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x0)

15:39:46 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0xb9b3588e256d8c3b)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x4}}]}, 0x6c}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000680)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x4}}]}, 0x6c}}, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000680)={'team0\x00', <r12=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r11, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x4}}]}, 0x6c}}, 0x0)
r13 = socket$inet_udp(0x2, 0x2, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000680)={'team0\x00', <r16=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r14, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r15, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x4}}]}, 0x6c}}, 0x0)
r17 = socket$inet_udp(0x2, 0x2, 0x0)
r18 = socket$nl_generic(0x10, 0x3, 0x10)
r19 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r17, 0x8933, &(0x7f0000000680)={'team0\x00', <r20=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r18, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r19, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x4}}]}, 0x6c}}, 0x0)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000000c0)={0x618, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2f1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd0f}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x990}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x83f2, 0xfb, 0x4, 0x1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x19a}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x618}, 0x1, 0x0, 0x0, 0x80}, 0x24000001)

15:39:46 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
socketpair(0x18, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x6c969d03c1edf7d0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000100)=@ccm_128={{0x303}, "d7705fd3ec623fa7", "93aa6336c8d8a64b0403d1ffd60942dc", "39c8587b", "b63e170bd3267b76"}, 0x28)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18) (async)
socketpair(0x18, 0x6, 0x0, &(0x7f0000000040)) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x6c969d03c1edf7d0) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) (async)
setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000100)=@ccm_128={{0x303}, "d7705fd3ec623fa7", "93aa6336c8d8a64b0403d1ffd60942dc", "39c8587b", "b63e170bd3267b76"}, 0x28) (async)

15:39:46 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x0)

15:39:46 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, r1, 0x10, 0x0, @ib={0x1b, 0x7, 0x24a52fc8, {"e9f8bf5447083ae55e2e3279a90099b4"}, 0x2, 0x9, 0x8}}}, 0xa0)

15:39:46 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0xb9b3588e256d8c3b) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x4}}]}, 0x6c}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000680)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x4}}]}, 0x6c}}, 0x0) (async)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000680)={'team0\x00', <r12=>0x0}) (rerun: 32)
sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r11, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x4}}]}, 0x6c}}, 0x0)
r13 = socket$inet_udp(0x2, 0x2, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r15 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000680)={'team0\x00', <r16=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r14, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r15, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x4}}]}, 0x6c}}, 0x0)
r17 = socket$inet_udp(0x2, 0x2, 0x0)
r18 = socket$nl_generic(0x10, 0x3, 0x10)
r19 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r17, 0x8933, &(0x7f0000000680)={'team0\x00', <r20=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r18, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r19, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x4}}]}, 0x6c}}, 0x0) (async)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000000c0)={0x618, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2f1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd0f}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x990}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x83f2, 0xfb, 0x4, 0x1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x19a}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x618}, 0x1, 0x0, 0x0, 0x80}, 0x24000001)

15:39:46 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x0) (async)

15:39:46 executing program 4:
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:46 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x13f}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x50, 0x0, 0x4feeaa2446970e8f, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xf2ca}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x20058000)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x40010)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4002880)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)

15:39:46 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0x1, {0x9, 0x4, "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", 0x6, 0x0, 0x6, 0x7f, 0x7, 0x46, 0x8}, r2}}, 0x128)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r2, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ffffd}, r2}}, 0xfffffffffffffeaa)

15:39:46 executing program 4:
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:46 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, r1, 0x10, 0x0, @ib={0x1b, 0x7, 0x24a52fc8, {"e9f8bf5447083ae55e2e3279a90099b4"}, 0x2, 0x9, 0x8}}}, 0xa0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, r1, 0x10, 0x0, @ib={0x1b, 0x7, 0x24a52fc8, {"e9f8bf5447083ae55e2e3279a90099b4"}, 0x2, 0x9, 0x8}}}, 0xa0) (async)

15:39:46 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
mmap(&(0x7f0000ff0000/0xf000)=nil, 0xf000, 0x0, 0x110, r0, 0x0)

15:39:46 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x13f}}, 0x20) (async, rerun: 64)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 64)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x50, 0x0, 0x4feeaa2446970e8f, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xf2ca}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x20058000) (async, rerun: 32)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20) (async, rerun: 32)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) (async, rerun: 64)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x40010) (rerun: 64)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4002880) (async, rerun: 64)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18) (rerun: 64)

15:39:46 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
mmap(&(0x7f0000ff0000/0xf000)=nil, 0xf000, 0x0, 0x110, r0, 0x0)

15:39:46 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async, rerun: 64)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 64)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0x1, {0x9, 0x4, "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", 0x6, 0x0, 0x6, 0x7f, 0x7, 0x46, 0x8}, r2}}, 0x128) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r2, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ffffd}, r2}}, 0xfffffffffffffeaa)

15:39:46 executing program 4:
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:46 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0xb9b3588e256d8c3b)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x4}}]}, 0x6c}}, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000680)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x4}}]}, 0x6c}}, 0x0) (async)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000680)={'team0\x00', <r12=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r11, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x4}}]}, 0x6c}}, 0x0)
r13 = socket$inet_udp(0x2, 0x2, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r15 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000680)={'team0\x00', <r16=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r14, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r15, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x4}}]}, 0x6c}}, 0x0) (async)
r17 = socket$inet_udp(0x2, 0x2, 0x0)
r18 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r19 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r17, 0x8933, &(0x7f0000000680)={'team0\x00', <r20=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r18, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r19, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x4}}]}, 0x6c}}, 0x0) (async)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000000c0)={0x618, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2f1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd0f}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x990}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x83f2, 0xfb, 0x4, 0x1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x19a}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x618}, 0x1, 0x0, 0x0, 0x80}, 0x24000001)

15:39:46 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
mmap(&(0x7f0000ff0000/0xf000)=nil, 0xf000, 0x0, 0x110, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18) (async)
mmap(&(0x7f0000ff0000/0xf000)=nil, 0xf000, 0x0, 0x110, r0, 0x0) (async)

15:39:46 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, r1, 0x10, 0x0, @ib={0x1b, 0x7, 0x24a52fc8, {"e9f8bf5447083ae55e2e3279a90099b4"}, 0x2, 0x9, 0x8}}}, 0xa0)

15:39:46 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000003, 0x13, 0xffffffffffffffff, 0x9)

15:39:46 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x13f}}, 0x20) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x50, 0x0, 0x4feeaa2446970e8f, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xf2ca}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x20058000) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20) (async)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x40010) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4002880)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)

15:39:46 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)
mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000003, 0x13, 0xffffffffffffffff, 0x9)

15:39:46 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000006, 0x2010, r0, 0x2d686000)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x40000000, 0x4)

15:39:46 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000cc0), r2)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r3)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x40, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x24, 0xa, '/proc/sys/net/ipv4/vs/pmtu_disc\x00'}]}, 0x40}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11a08008}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00082cbd7000fbdbdf25010000000c0004000500000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8000)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:46 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
accept$nfc_llcp(r1, &(0x7f0000000240), &(0x7f00000002c0)=0x60)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x7800, 0x40, 0x72, 0x7fffffff, {{0x3c, 0x4, 0x1, 0x1, 0xf0, 0x66, 0x0, 0x2, 0x29, 0x0, @remote, @empty, {[@cipso={0x86, 0x55, 0x0, [{0x1a9ba47ea604fbde, 0xd, "f8aed56b4afca0b9980272"}, {0x2, 0x5, "c99a9c"}, {0x7, 0xf, "65edb219161c7dc1a8fb85e9f6"}, {0x7, 0x5, "21dc17"}, {0x6, 0x12, "07960a6f934975a917ab2049ae1dcd84"}, {0x1, 0xe, "a35ef6bb8c86df95f2509201"}, {0x5, 0x9, "6a3f87067d8a44"}]}, @ssrr={0x89, 0x7, 0x54, [@rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x54, 0xe1, 0x3, 0x8, [{@broadcast, 0x3}, {@empty, 0xffff}, {@rand_addr=0x64010101}, {@private=0xa010101, 0xfff}, {@rand_addr=0x64010102, 0x3}, {@broadcast, 0x3}, {@remote, 0x9}, {@rand_addr=0x64010100, 0x2}, {@multicast1, 0xb2e}, {@rand_addr=0x64010100, 0xf40}]}, @timestamp_addr={0x44, 0x2c, 0xcf, 0x1, 0x3, [{@multicast2, 0x20}, {@local, 0xfffffffc}, {@empty, 0xbf09}, {@remote, 0x8}, {@broadcast}]}]}}}}})
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)

15:39:46 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000006, 0x2010, r0, 0x2d686000) (async, rerun: 64)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x40000000, 0x4) (rerun: 64)

15:39:47 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0x1, {0x9, 0x4, "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", 0x6, 0x0, 0x6, 0x7f, 0x7, 0x46, 0x8}, r2}}, 0x128)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r2, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ffffd}, r2}}, 0xfffffffffffffeaa)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0x1, {0x9, 0x4, "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", 0x6, 0x0, 0x6, 0x7f, 0x7, 0x46, 0x8}, r2}}, 0x128) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r2, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ffffd}, r2}}, 0xfffffffffffffeaa) (async)

15:39:47 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000003, 0x13, 0xffffffffffffffff, 0x9)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)
mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000003, 0x13, 0xffffffffffffffff, 0x9) (async)

15:39:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000006, 0x2010, r0, 0x2d686000)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x40000000, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000006, 0x2010, r0, 0x2d686000) (async)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x40000000, 0x4) (async)

15:39:47 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000000)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:47 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
accept$nfc_llcp(r1, &(0x7f0000000240), &(0x7f00000002c0)=0x60) (async, rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x7800, 0x40, 0x72, 0x7fffffff, {{0x3c, 0x4, 0x1, 0x1, 0xf0, 0x66, 0x0, 0x2, 0x29, 0x0, @remote, @empty, {[@cipso={0x86, 0x55, 0x0, [{0x1a9ba47ea604fbde, 0xd, "f8aed56b4afca0b9980272"}, {0x2, 0x5, "c99a9c"}, {0x7, 0xf, "65edb219161c7dc1a8fb85e9f6"}, {0x7, 0x5, "21dc17"}, {0x6, 0x12, "07960a6f934975a917ab2049ae1dcd84"}, {0x1, 0xe, "a35ef6bb8c86df95f2509201"}, {0x5, 0x9, "6a3f87067d8a44"}]}, @ssrr={0x89, 0x7, 0x54, [@rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x54, 0xe1, 0x3, 0x8, [{@broadcast, 0x3}, {@empty, 0xffff}, {@rand_addr=0x64010101}, {@private=0xa010101, 0xfff}, {@rand_addr=0x64010102, 0x3}, {@broadcast, 0x3}, {@remote, 0x9}, {@rand_addr=0x64010100, 0x2}, {@multicast1, 0xb2e}, {@rand_addr=0x64010100, 0xf40}]}, @timestamp_addr={0x44, 0x2c, 0xcf, 0x1, 0x3, [{@multicast2, 0x20}, {@local, 0xfffffffc}, {@empty, 0xbf09}, {@remote, 0x8}, {@broadcast}]}]}}}}}) (rerun: 64)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)

[  736.286657] nbd: must specify at least one socket
15:39:47 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000cc0), r2) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r3)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x40, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x24, 0xa, '/proc/sys/net/ipv4/vs/pmtu_disc\x00'}]}, 0x40}}, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11a08008}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00082cbd7000fbdbdf25010000000c0004000500000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
read$watch_queue(0xffffffffffffffff, &(0x7f0000000000)=""/84, 0x54)
getuid()

15:39:47 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async, rerun: 64)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (rerun: 64)
accept$nfc_llcp(r1, &(0x7f0000000240), &(0x7f00000002c0)=0x60) (async, rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x7800, 0x40, 0x72, 0x7fffffff, {{0x3c, 0x4, 0x1, 0x1, 0xf0, 0x66, 0x0, 0x2, 0x29, 0x0, @remote, @empty, {[@cipso={0x86, 0x55, 0x0, [{0x1a9ba47ea604fbde, 0xd, "f8aed56b4afca0b9980272"}, {0x2, 0x5, "c99a9c"}, {0x7, 0xf, "65edb219161c7dc1a8fb85e9f6"}, {0x7, 0x5, "21dc17"}, {0x6, 0x12, "07960a6f934975a917ab2049ae1dcd84"}, {0x1, 0xe, "a35ef6bb8c86df95f2509201"}, {0x5, 0x9, "6a3f87067d8a44"}]}, @ssrr={0x89, 0x7, 0x54, [@rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x54, 0xe1, 0x3, 0x8, [{@broadcast, 0x3}, {@empty, 0xffff}, {@rand_addr=0x64010101}, {@private=0xa010101, 0xfff}, {@rand_addr=0x64010102, 0x3}, {@broadcast, 0x3}, {@remote, 0x9}, {@rand_addr=0x64010100, 0x2}, {@multicast1, 0xb2e}, {@rand_addr=0x64010100, 0xf40}]}, @timestamp_addr={0x44, 0x2c, 0xcf, 0x1, 0x3, [{@multicast2, 0x20}, {@local, 0xfffffffc}, {@empty, 0xbf09}, {@remote, 0x8}, {@broadcast}]}]}}}}}) (async, rerun: 64)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)

15:39:47 executing program 4:
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x6000)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000328b97000fbdbdf25030000000c000f000700004bb14f4000e5fd2560f58e8d3e20c17d"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40)

[  736.443891] nbd: must specify at least one socket
15:39:47 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000000)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:47 executing program 4:
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x6000)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async, rerun: 32)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000328b97000fbdbdf25030000000c000f000700004bb14f4000e5fd2560f58e8d3e20c17d"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40) (rerun: 32)

15:39:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
read$watch_queue(0xffffffffffffffff, &(0x7f0000000000)=""/84, 0x54) (async)
getuid()

15:39:47 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x2, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x3, {0x5, 0xfffffeff, "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", 0xff, 0xe0, 0x85, 0x5, 0x2, 0x3, 0xdc, 0x1}, r1}}, 0x128)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)

15:39:47 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000cc0), r2) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r3)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x40, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x24, 0xa, '/proc/sys/net/ipv4/vs/pmtu_disc\x00'}]}, 0x40}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11a08008}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00082cbd7000fbdbdf25010000000c0004000500000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:47 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000000)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:47 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0xc, 0x4)

15:39:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
read$watch_queue(0xffffffffffffffff, &(0x7f0000000000)=""/84, 0x54) (async)
getuid()

15:39:47 executing program 4:
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) (async)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000328b97000fbdbdf25030000000c000f000700004bb14f4000e5fd2560f58e8d3e20c17d"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40)

15:39:47 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x2, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x3, {0x5, 0xfffffeff, "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", 0xff, 0xe0, 0x85, 0x5, 0x2, 0x3, 0xdc, 0x1}, r1}}, 0x128) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)

15:39:47 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0xc, 0x4)

[  736.645641] nbd: must specify at least one socket
15:39:47 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0xffffffffffffff6c, 0xfa00, {&(0x7f0000000240)}}, 0x18)

15:39:47 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4011, r0, 0x0)

15:39:47 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x21, 0x2}, 0x7)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:47 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x2, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x3, {0x5, 0xfffffeff, "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", 0xff, 0xe0, 0x85, 0x5, 0x2, 0x3, 0xdc, 0x1}, r1}}, 0x128)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2, 0xa}}, 0x20) (async)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x3, {0x5, 0xfffffeff, "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", 0xff, 0xe0, 0x85, 0x5, 0x2, 0x3, 0xdc, 0x1}, r1}}, 0x128) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30) (async)

15:39:47 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0xc, 0x4)

15:39:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4011, r0, 0x0)

15:39:47 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x21, 0x2}, 0x7) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:47 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:47 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="f5000000750200ea0000004f54b0bf99712b143d3d849a35935661563015dcc98ae5d710bd200000000000000088c856db210b6432c622c28280a618cf7233f81069051d42e39c34f9011a597d257fc420b488336804556497b5251abee5019c841ad14c1844a6c7573fe2f55ffc86a0fe2fa0d5f554ddea090000009d5e536ae7596805d2f7e183eb3f273d32b52f1f3cd682dd78aee29dd94a5b9685a8cde07ffc98aba37d1757961dfaa942649c251a80b53b04b414303d8843ce604993f7de45225a459a7d165cfb7ae97a56fb3181a2dce36ac21b463d957fa5e92b5eb35ee5f93d0fa8a43e5d6b292fc8bc89d3203de4cac3"], 0xf5)
getsockopt$nfc_llcp(r0, 0x118, 0x1, &(0x7f0000000100)=""/210, 0xd2)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4011, r0, 0x0)

15:39:47 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0xa0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), r2, r3}}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x4, {0xa, 0x4e23, 0xd74, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, r1}}, 0x38)

15:39:47 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000040)) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0xffffffffffffff6c, 0xfa00, {&(0x7f0000000240)}}, 0x18)

15:39:47 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x21, 0x2}, 0x7) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:47 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:47 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async, rerun: 64)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 64)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async)
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000040)) (async, rerun: 32)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0xffffffffffffff6c, 0xfa00, {&(0x7f0000000240)}}, 0x18) (rerun: 32)

15:39:47 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async, rerun: 64)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) (async, rerun: 64)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="f5000000750200ea0000004f54b0bf99712b143d3d849a35935661563015dcc98ae5d710bd200000000000000088c856db210b6432c622c28280a618cf7233f81069051d42e39c34f9011a597d257fc420b488336804556497b5251abee5019c841ad14c1844a6c7573fe2f55ffc86a0fe2fa0d5f554ddea090000009d5e536ae7596805d2f7e183eb3f273d32b52f1f3cd682dd78aee29dd94a5b9685a8cde07ffc98aba37d1757961dfaa942649c251a80b53b04b414303d8843ce604993f7de45225a459a7d165cfb7ae97a56fb3181a2dce36ac21b463d957fa5e92b5eb35ee5f93d0fa8a43e5d6b292fc8bc89d3203de4cac3"], 0xf5)
getsockopt$nfc_llcp(r0, 0x118, 0x1, &(0x7f0000000100)=""/210, 0xd2)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:47 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0xd0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, <r2=>0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000180)={r2, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0]})
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18}, 0x18)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000000))

15:39:47 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0xa0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), r2, r3}}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x4, {0xa, 0x4e23, 0xd74, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, r1}}, 0x38)

15:39:47 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000380), 0xffffffffffffffff, 0x2}}, 0x18)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)

15:39:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x4}}]}, 0x6c}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000680)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r6, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x4}}]}, 0x6c}}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000680)={'team0\x00', <r11=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x4}}]}, 0x6c}}, 0x0)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000680)={'team0\x00', <r15=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r13, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r14, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r16=>0x0})
r17 = socket$inet_udp(0x2, 0x2, 0x0)
r18 = socket$nl_generic(0x10, 0x3, 0x10)
r19 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r17, 0x8933, &(0x7f0000000680)={'team0\x00', <r20=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r18, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r19, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r21=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', <r22=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000100)={0x44c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x188, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf569}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x20, 0x12, 0x7ff}, {0x8, 0x5, 0x80, 0x3}, {0x8b73, 0x6, 0xfa}, {0xc98, 0x3, 0x3f, 0x4}, {0x40, 0x40, 0x9, 0xf5d}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x4}}, {{0x8, 0x1, r15}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r21}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r22}}}]}}, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x1f, 0xf9, 0x98}, {0x7f, 0x81, 0x6, 0x4}, {0x4, 0x1f, 0xe0, 0x100}, {0x506, 0x5, 0x80, 0x1}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x22000000}, 0x40111)

15:39:47 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0xd0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, <r2=>0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000180)={r2, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0]})
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18}, 0x18)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000000))
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0xd0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000180)={r2, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18}, 0x18) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000000)) (async)

15:39:47 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="f5000000750200ea0000004f54b0bf99712b143d3d849a35935661563015dcc98ae5d710bd200000000000000088c856db210b6432c622c28280a618cf7233f81069051d42e39c34f9011a597d257fc420b488336804556497b5251abee5019c841ad14c1844a6c7573fe2f55ffc86a0fe2fa0d5f554ddea090000009d5e536ae7596805d2f7e183eb3f273d32b52f1f3cd682dd78aee29dd94a5b9685a8cde07ffc98aba37d1757961dfaa942649c251a80b53b04b414303d8843ce604993f7de45225a459a7d165cfb7ae97a56fb3181a2dce36ac21b463d957fa5e92b5eb35ee5f93d0fa8a43e5d6b292fc8bc89d3203de4cac3"], 0xf5)
getsockopt$nfc_llcp(r0, 0x118, 0x1, &(0x7f0000000100)=""/210, 0xd2)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) (async)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="f5000000750200ea0000004f54b0bf99712b143d3d849a35935661563015dcc98ae5d710bd200000000000000088c856db210b6432c622c28280a618cf7233f81069051d42e39c34f9011a597d257fc420b488336804556497b5251abee5019c841ad14c1844a6c7573fe2f55ffc86a0fe2fa0d5f554ddea090000009d5e536ae7596805d2f7e183eb3f273d32b52f1f3cd682dd78aee29dd94a5b9685a8cde07ffc98aba37d1757961dfaa942649c251a80b53b04b414303d8843ce604993f7de45225a459a7d165cfb7ae97a56fb3181a2dce36ac21b463d957fa5e92b5eb35ee5f93d0fa8a43e5d6b292fc8bc89d3203de4cac3"], 0xf5) (async)
getsockopt$nfc_llcp(r0, 0x118, 0x1, &(0x7f0000000100)=""/210, 0xd2) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)

15:39:47 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0xa0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) (async)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), r2, r3}}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x4, {0xa, 0x4e23, 0xd74, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, r1}}, 0x38)

15:39:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x4}}]}, 0x6c}}, 0x0) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000680)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r6, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x4}}]}, 0x6c}}, 0x0) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000680)={'team0\x00', <r11=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x4}}]}, 0x6c}}, 0x0)
r12 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000680)={'team0\x00', <r15=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r13, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r14, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r16=>0x0})
r17 = socket$inet_udp(0x2, 0x2, 0x0)
r18 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r19 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r17, 0x8933, &(0x7f0000000680)={'team0\x00', <r20=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r18, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r19, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x4}}]}, 0x6c}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r21=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', <r22=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000100)={0x44c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x188, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf569}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x20, 0x12, 0x7ff}, {0x8, 0x5, 0x80, 0x3}, {0x8b73, 0x6, 0xfa}, {0xc98, 0x3, 0x3f, 0x4}, {0x40, 0x40, 0x9, 0xf5d}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x4}}, {{0x8, 0x1, r15}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r21}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r22}}}]}}, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x1f, 0xf9, 0x98}, {0x7f, 0x81, 0x6, 0x4}, {0x4, 0x1f, 0xe0, 0x100}, {0x506, 0x5, 0x80, 0x1}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x22000000}, 0x40111)

15:39:48 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000fddbdf2506000000050007000300000006001d00000600029d0001000000050005000100000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4c880)

15:39:48 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0xd0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, <r2=>0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000180)={r2, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0]})
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18}, 0x18)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000000))
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0xd0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000180)={r2, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18}, 0x18) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000000)) (async)

15:39:48 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socketpair(0x10, 0x80000, 0x54, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:48 executing program 1:
getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x4, &(0x7f0000000000)=""/58, 0x3a)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x30)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
write$P9_RAUTH(r2, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x0, 0x0, 0x2}}, 0x14)

15:39:48 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000380), 0xffffffffffffffff, 0x2}}, 0x18)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)

15:39:48 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000fddbdf2506000000050007000300000006001d00000600029d0001000000050005000100000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4c880)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000fddbdf2506000000050007000300000006001d00000600029d0001000000050005000100000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4c880) (async)

15:39:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x4}}]}, 0x6c}}, 0x0) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000680)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r6, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x4}}]}, 0x6c}}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r10 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000680)={'team0\x00', <r11=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x4}}]}, 0x6c}}, 0x0) (async)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r14 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000680)={'team0\x00', <r15=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r13, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r14, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x4}}]}, 0x6c}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r16=>0x0})
r17 = socket$inet_udp(0x2, 0x2, 0x0)
r18 = socket$nl_generic(0x10, 0x3, 0x10)
r19 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r17, 0x8933, &(0x7f0000000680)={'team0\x00', <r20=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r18, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r19, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r21=>0x0}) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', <r22=>0x0}) (rerun: 64)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000100)={0x44c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x188, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf569}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x20, 0x12, 0x7ff}, {0x8, 0x5, 0x80, 0x3}, {0x8b73, 0x6, 0xfa}, {0xc98, 0x3, 0x3f, 0x4}, {0x40, 0x40, 0x9, 0xf5d}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x4}}, {{0x8, 0x1, r15}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r21}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r22}}}]}}, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x1f, 0xf9, 0x98}, {0x7f, 0x81, 0x6, 0x4}, {0x4, 0x1f, 0xe0, 0x100}, {0x506, 0x5, 0x80, 0x1}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x22000000}, 0x40111)

15:39:48 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000001)

15:39:48 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000001)

15:39:48 executing program 1:
getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x4, &(0x7f0000000000)=""/58, 0x3a) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async, rerun: 64)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x30) (rerun: 64)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async, rerun: 64)
write$P9_RAUTH(r2, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x0, 0x0, 0x2}}, 0x14) (rerun: 64)

15:39:48 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000fddbdf2506000000050007000300000006001d00000600029d0001000000050005000100000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4c880)

15:39:48 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000380), 0xffffffffffffffff, 0x2}}, 0x18)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000380), 0xffffffffffffffff, 0x2}}, 0x18) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x106, 0x8}}, 0x20) (async)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18) (async)

15:39:48 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
socketpair(0x10, 0x80000, 0x54, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x5)

15:39:48 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000001)

15:39:48 executing program 1:
getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x4, &(0x7f0000000000)=""/58, 0x3a) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x30)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
write$P9_RAUTH(r2, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x0, 0x0, 0x2}}, 0x14)

15:39:48 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x4, {0xfffffffd, 0x9, "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", 0x40, 0xbf, 0x7, 0x7f, 0x80, 0x5, 0x5}}}, 0x128)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x5)

15:39:48 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socketpair(0x10, 0x80000, 0x54, &(0x7f0000000040)) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:48 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000140)={0xa, 0x4}, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x0, r3, 0x10, 0x1, @ib={0x1b, 0xce, 0x6, {"81750c65a0ca50b66266016905b2150b"}, 0x24, 0x2, 0x6e5}}}, 0xa0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:48 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = socket(0x25, 0x5, 0x401)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x804)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:48 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
syz_open_dev$media(&(0x7f0000000000), 0x6, 0x200240)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:48 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = socket(0x25, 0x5, 0x401)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x804)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
socket(0x25, 0x5, 0x401) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x804) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)

15:39:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x5)

15:39:48 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000140)={0xa, 0x4}, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x0, r3, 0x10, 0x1, @ib={0x1b, 0xce, 0x6, {"81750c65a0ca50b66266016905b2150b"}, 0x24, 0x2, 0x6e5}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:48 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x4, {0xfffffffd, 0x9, "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", 0x40, 0xbf, 0x7, 0x7f, 0x80, 0x5, 0x5}}}, 0x128)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x4, {0xfffffffd, 0x9, "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", 0x40, 0xbf, 0x7, 0x7f, 0x80, 0x5, 0x5}}}, 0x128) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)

15:39:48 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:48 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r1 = socket(0x25, 0x5, 0x401) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 32)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x804) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:48 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20) (async)
syz_open_dev$media(&(0x7f0000000000), 0x6, 0x200240)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20004081)

15:39:48 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000140)={0xa, 0x4}, 0xc) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x0, r3, 0x10, 0x1, @ib={0x1b, 0xce, 0x6, {"81750c65a0ca50b66266016905b2150b"}, 0x24, 0x2, 0x6e5}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:48 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x4, {0xfffffffd, 0x9, "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", 0x40, 0xbf, 0x7, 0x7f, 0x80, 0x5, 0x5}}}, 0x128)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x4, {0xfffffffd, 0x9, "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", 0x40, 0xbf, 0x7, 0x7f, 0x80, 0x5, 0x5}}}, 0x128) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)

15:39:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20004081)

15:39:48 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
syz_open_dev$media(&(0x7f0000000000), 0x6, 0x200240)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async)
syz_open_dev$media(&(0x7f0000000000), 0x6, 0x200240) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30) (async)

15:39:48 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)

15:39:48 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
accept4$nfc_llcp(r0, &(0x7f0000000000), &(0x7f0000000100)=0x60, 0x80800)

15:39:48 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x2, 0x8}}, 0x20)
r4 = syz_open_dev$sg(&(0x7f00000000c0), 0x7, 0x50000)
ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000100)=0x1)
write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r3}}, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:48 executing program 4:
r0 = socket(0x3, 0x2, 0x80)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r5=>0x0})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000680)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r8, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', <r10=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'tunl0\x00', <r11=>0x0, 0x8000, 0x1, 0x1, 0x3, {{0xd, 0x4, 0x3, 0x7, 0x34, 0x67, 0x0, 0x0, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @ssrr={0x89, 0x1f, 0xbd, [@local, @dev={0xac, 0x14, 0x14, 0x2f}, @remote, @loopback, @multicast2, @private=0xa010100, @multicast1]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', <r12=>0x0})
r13 = socket$inet_udp(0x2, 0x2, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000680)={'team0\x00', <r16=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r14, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r15, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000240)={'gretap0\x00', <r17=>0x0, 0x8000, 0x40, 0x3, 0x39e8800, {{0x1c, 0x4, 0x1, 0x2c, 0x70, 0x64, 0x0, 0x40, 0x2f, 0x0, @multicast1, @loopback, {[@rr={0x7, 0xb, 0x6b, [@multicast1, @broadcast]}, @end, @rr={0x7, 0x7, 0xaf, [@empty]}, @rr={0x7, 0x7, 0x8d, [@rand_addr=0x64010101]}, @cipso={0x86, 0x17, 0x0, [{0x6, 0xf, "3c295cfaaeb1238e12b01e23c5"}, {0x5, 0x2}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0xc2, 0x3, 0x8, [{@broadcast, 0x4b60}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x26a}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000340)={'gretap0\x00', <r18=>0x0, 0x40, 0x80, 0x0, 0x0, {{0xc, 0x4, 0x2, 0x8, 0x30, 0x68, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0x3c}, {[@timestamp={0x44, 0x1c, 0xb5, 0x0, 0x9, [0x1, 0x919, 0x0, 0x5, 0xfffffff8, 0x800000]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', <r19=>0x0})
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000440)={0x888, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x391}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfed}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x25c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x932}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9c67}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xea, 0x81, 0x1, 0xd988}, {0xff, 0x6, 0xff, 0x8001}, {0x3, 0x9c, 0xdd, 0x1ff}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1e}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x1}, 0x4008000)
r20 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r20, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20004081)

15:39:48 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x10, r2, 0xb98f9000)

15:39:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001"], 0x40}}, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:49 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
accept4$nfc_llcp(r0, &(0x7f0000000000), &(0x7f0000000100)=0x60, 0x80800)

15:39:49 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x10, r2, 0xb98f9000)

15:39:49 executing program 4:
r0 = socket(0x3, 0x2, 0x80) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r5=>0x0})
r6 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r8 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000680)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r8, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', <r10=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'tunl0\x00', <r11=>0x0, 0x8000, 0x1, 0x1, 0x3, {{0xd, 0x4, 0x3, 0x7, 0x34, 0x67, 0x0, 0x0, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @ssrr={0x89, 0x1f, 0xbd, [@local, @dev={0xac, 0x14, 0x14, 0x2f}, @remote, @loopback, @multicast2, @private=0xa010100, @multicast1]}]}}}}}) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', <r12=>0x0}) (async, rerun: 32)
r13 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000680)={'team0\x00', <r16=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r14, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r15, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000240)={'gretap0\x00', <r17=>0x0, 0x8000, 0x40, 0x3, 0x39e8800, {{0x1c, 0x4, 0x1, 0x2c, 0x70, 0x64, 0x0, 0x40, 0x2f, 0x0, @multicast1, @loopback, {[@rr={0x7, 0xb, 0x6b, [@multicast1, @broadcast]}, @end, @rr={0x7, 0x7, 0xaf, [@empty]}, @rr={0x7, 0x7, 0x8d, [@rand_addr=0x64010101]}, @cipso={0x86, 0x17, 0x0, [{0x6, 0xf, "3c295cfaaeb1238e12b01e23c5"}, {0x5, 0x2}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0xc2, 0x3, 0x8, [{@broadcast, 0x4b60}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x26a}]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000340)={'gretap0\x00', <r18=>0x0, 0x40, 0x80, 0x0, 0x0, {{0xc, 0x4, 0x2, 0x8, 0x30, 0x68, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0x3c}, {[@timestamp={0x44, 0x1c, 0xb5, 0x0, 0x9, [0x1, 0x919, 0x0, 0x5, 0xfffffff8, 0x800000]}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', <r19=>0x0})
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000440)={0x888, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x391}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfed}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x25c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x932}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9c67}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xea, 0x81, 0x1, 0xd988}, {0xff, 0x6, 0xff, 0x8001}, {0x3, 0x9c, 0xdd, 0x1ff}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1e}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x1}, 0x4008000)
r20 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r20, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:49 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x2, 0x8}}, 0x20) (async)
r4 = syz_open_dev$sg(&(0x7f00000000c0), 0x7, 0x50000)
ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000100)=0x1) (async)
write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r3}}, 0xc) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:49 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
accept4$nfc_llcp(r0, &(0x7f0000000000), &(0x7f0000000100)=0x60, 0x80800)

15:39:49 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)

15:39:49 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async, rerun: 32)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x10, r2, 0xb98f9000) (rerun: 32)

[  738.391065] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  738.424222] nbd: must specify at least one socket
15:39:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001"], 0x40}}, 0x0) (async, rerun: 64)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (rerun: 64)

15:39:49 executing program 5:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff14, &(0x7f0000000080)={0x0}}, 0x0)

15:39:49 executing program 4:
r0 = socket(0x3, 0x2, 0x80) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r5=>0x0}) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000680)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r8, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x4}}]}, 0x6c}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', <r10=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'tunl0\x00', <r11=>0x0, 0x8000, 0x1, 0x1, 0x3, {{0xd, 0x4, 0x3, 0x7, 0x34, 0x67, 0x0, 0x0, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @ssrr={0x89, 0x1f, 0xbd, [@local, @dev={0xac, 0x14, 0x14, 0x2f}, @remote, @loopback, @multicast2, @private=0xa010100, @multicast1]}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', <r12=>0x0}) (async, rerun: 32)
r13 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000680)={'team0\x00', <r16=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r14, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r15, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x4}}]}, 0x6c}}, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000240)={'gretap0\x00', <r17=>0x0, 0x8000, 0x40, 0x3, 0x39e8800, {{0x1c, 0x4, 0x1, 0x2c, 0x70, 0x64, 0x0, 0x40, 0x2f, 0x0, @multicast1, @loopback, {[@rr={0x7, 0xb, 0x6b, [@multicast1, @broadcast]}, @end, @rr={0x7, 0x7, 0xaf, [@empty]}, @rr={0x7, 0x7, 0x8d, [@rand_addr=0x64010101]}, @cipso={0x86, 0x17, 0x0, [{0x6, 0xf, "3c295cfaaeb1238e12b01e23c5"}, {0x5, 0x2}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0xc2, 0x3, 0x8, [{@broadcast, 0x4b60}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x26a}]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000340)={'gretap0\x00', <r18=>0x0, 0x40, 0x80, 0x0, 0x0, {{0xc, 0x4, 0x2, 0x8, 0x30, 0x68, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0x3c}, {[@timestamp={0x44, 0x1c, 0xb5, 0x0, 0x9, [0x1, 0x919, 0x0, 0x5, 0xfffffff8, 0x800000]}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', <r19=>0x0})
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000440)={0x888, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x391}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfed}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x25c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x932}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9c67}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xea, 0x81, 0x1, 0xd988}, {0xff, 0x6, 0xff, 0x8001}, {0x3, 0x9c, 0xdd, 0x1ff}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1e}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x1}, 0x4008000)
r20 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r20, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:49 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)

[  738.559867] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  738.597733] nbd: must specify at least one socket
15:39:49 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
accept4$nfc_llcp(r2, &(0x7f0000000380), &(0x7f0000000300)=0x60, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x6c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x81}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6e9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x52}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000040)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x8000)

15:39:49 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x2, 0x8}}, 0x20) (async, rerun: 32)
r4 = syz_open_dev$sg(&(0x7f00000000c0), 0x7, 0x50000) (rerun: 32)
ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000100)=0x1) (async)
write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r3}}, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

[  738.617559] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  738.639627] nbd: must specify at least one socket
15:39:49 executing program 5:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff14, &(0x7f0000000080)={0x0}}, 0x0)

[  738.660010] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
15:39:49 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x24, 0xa, '/proc/sys/net/ipv4/vs/pmtu_disc\x00'}]}, 0x40}}, 0x0)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r4)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x40, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x24, 0xa, '/proc/sys/net/ipv4/vs/pmtu_disc\x00'}]}, 0x40}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r5, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x240000b0}, 0x0)

[  738.692956] nbd: must specify at least one socket
[  738.711832] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  738.730643] nbd: must specify at least one socket
15:39:49 executing program 5:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff14, &(0x7f0000000080)={0x0}}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff14, &(0x7f0000000080)={0x0}}, 0x0) (async)

15:39:49 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
accept4$nfc_llcp(r2, &(0x7f0000000380), &(0x7f0000000300)=0x60, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x6c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x81}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6e9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x52}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000040)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x8000)

[  738.742544] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  738.762351] nbd: must specify at least one socket
[  738.772171] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
15:39:49 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30) (async)

15:39:49 executing program 0:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x2004000)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4010, r2, 0x79a23000)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r3}}, 0x18)

[  738.807228] nbd: must specify at least one socket
[  738.823346] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  738.850472] nbd: must specify at least one socket
[  738.869619] nbd: must specify at least one socket
[  738.874732] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  738.894449] nbd: must specify at least one socket
[  738.899527] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  738.909775] nbd: must specify at least one socket
[  738.914862] nbd: must specify at least one socket
[  738.920617] nbd: must specify at least one socket
[  738.925653] nbd: must specify at least one socket
[  738.932199] nbd: must specify at least one socket
[  738.951682] nbd: must specify at least one socket
[  738.962849] nbd: must specify at least one socket
[  738.967913] nbd: must specify at least one socket
[  738.974811] nbd: must specify at least one socket
[  738.990910] nbd: must specify at least one socket
[  738.995872] nbd: must specify at least one socket
[  739.004868] nbd: must specify at least one socket
[  739.010815] nbd: must specify at least one socket
[  739.015745] nbd: must specify at least one socket
[  739.023902] nbd: must specify at least one socket
[  739.029305] nbd: must specify at least one socket
[  739.034226] nbd: must specify at least one socket
[  739.039890] nbd: must specify at least one socket
[  739.044778] nbd: must specify at least one socket
[  739.049758] nbd: must specify at least one socket
[  739.054641] nbd: must specify at least one socket
[  739.059745] nbd: must specify at least one socket
[  739.064655] nbd: must specify at least one socket
[  739.069657] nbd: must specify at least one socket
[  739.074536] nbd: must specify at least one socket
[  739.079633] nbd: must specify at least one socket
[  739.084526] nbd: must specify at least one socket
[  739.089509] nbd: must specify at least one socket
[  739.094388] nbd: must specify at least one socket
[  739.099382] nbd: must specify at least one socket
[  739.104353] nbd: must specify at least one socket
[  739.109320] nbd: must specify at least one socket
[  739.114208] nbd: must specify at least one socket
[  739.119147] nbd: must specify at least one socket
[  739.124023] nbd: must specify at least one socket
[  739.129517] nbd: must specify at least one socket
[  739.134398] nbd: must specify at least one socket
[  739.139349] nbd: must specify at least one socket
[  739.144237] nbd: must specify at least one socket
[  739.149221] nbd: must specify at least one socket
[  739.154141] nbd: must specify at least one socket
[  739.159094] nbd: must specify at least one socket
[  739.163972] nbd: must specify at least one socket
[  739.168940] nbd: must specify at least one socket
[  739.173819] nbd: must specify at least one socket
[  739.178772] nbd: must specify at least one socket
[  739.183661] nbd: must specify at least one socket
[  739.188632] nbd: must specify at least one socket
[  739.193516] nbd: must specify at least one socket
[  739.198478] nbd: must specify at least one socket
15:39:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001"], 0x40}}, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001"], 0x40}}, 0x0) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)

15:39:50 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x101}}, 0x10)

15:39:50 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async, rerun: 64)
accept4$nfc_llcp(r2, &(0x7f0000000380), &(0x7f0000000300)=0x60, 0x0) (async, rerun: 64)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x6c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x81}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6e9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x52}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000040) (async, rerun: 64)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async, rerun: 64)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x8000)

15:39:50 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x24, 0xa, '/proc/sys/net/ipv4/vs/pmtu_disc\x00'}]}, 0x40}}, 0x0)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r4)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x40, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x24, 0xa, '/proc/sys/net/ipv4/vs/pmtu_disc\x00'}]}, 0x40}}, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r5, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x240000b0}, 0x0)

15:39:50 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)

15:39:50 executing program 0:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (rerun: 64)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async, rerun: 32)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x2004000) (async, rerun: 32)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4010, r2, 0x79a23000) (async, rerun: 32)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20) (async, rerun: 32)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r3}}, 0x18)

[  739.203361] nbd: must specify at least one socket
[  739.208427] nbd: must specify at least one socket
[  739.213308] nbd: must specify at least one socket
[  739.218263] nbd: must specify at least one socket
[  739.223157] nbd: must specify at least one socket
[  739.228028] nbd: must specify at least one socket
[  739.232995] nbd: must specify at least one socket
[  739.238047] nbd: must specify at least one socket
15:39:50 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x24, 0xa, '/proc/sys/net/ipv4/vs/pmtu_disc\x00'}]}, 0x40}}, 0x0)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r4)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x40, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x24, 0xa, '/proc/sys/net/ipv4/vs/pmtu_disc\x00'}]}, 0x40}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r5, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x240000b0}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x24, 0xa, '/proc/sys/net/ipv4/vs/pmtu_disc\x00'}]}, 0x40}}, 0x0) (async)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r4) (async)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x40, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x24, 0xa, '/proc/sys/net/ipv4/vs/pmtu_disc\x00'}]}, 0x40}}, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) (async)
sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r5, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x240000b0}, 0x0) (async)

[  739.284198] nbd: must specify at least one socket
[  739.296796] nbd: must specify at least one socket
15:39:50 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x101}}, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x101}}, 0x10) (async)

15:39:50 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, '\x00', 0x31}}, r2}}, 0x30)

[  739.339922] nbd: must specify at least one socket
[  739.350703] nbd: must specify at least one socket
[  739.374402] nbd: must specify at least one socket
15:39:50 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e22, 0xfcd1, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}}}, 0x38)

15:39:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x0)

[  739.389470] nbd: must specify at least one socket
15:39:50 executing program 0:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x2004000) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4010, r2, 0x79a23000) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r3}}, 0x18)

15:39:50 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e22, 0xfcd1, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}}}, 0x38)

15:39:50 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, '\x00', 0x31}}, r2}}, 0x30)

15:39:50 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, '\x00', 0x31}}, r2}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, '\x00', 0x31}}, r2}}, 0x30) (async)

15:39:50 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x101}}, 0x10)

15:39:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x0) (async)

15:39:50 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e22, 0xfcd1, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}}}, 0x38)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e22, 0xfcd1, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}}}, 0x38) (async)

15:39:50 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={<r4=>0xffffffffffffffff}, 0x17, 0x9}}, 0x20)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000380)={0x9, 0x108, 0xfa00, {r4, 0x2, "f84f19", "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"}}, 0x110)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x9, 0x7fff]}], r6, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x35}, 0x1f}, r6}}, 0x30)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x100}}, 0x10)

15:39:50 executing program 0:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x60814}, 0x20000000)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x0)

15:39:50 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x105802)
ioctl$SG_BLKTRACESTART(r1, 0x1274, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3, 0xff, 0xffffffff, 0x83, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3, 0x6}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x8, 0x7, 0x8, 0xa6, 0x1, 0xffffffffffffffff, 0x1000200, '\x00', 0x0, r1, 0x2, 0x0, 0x4}, 0x48)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000500)={0xb, 0x10, 0xfa00, {&(0x7f0000000440), 0xffffffffffffffff, 0x7fff}}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6a1f1d88}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000080)='syzkaller\x00', 0x90f8, 0x2f, &(0x7f0000000200)=""/47, 0x40f00, 0xa, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x10, 0xffff7fff, 0x800}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0x1, r3, 0xffffffffffffffff, r4, 0x1, 0x1]}, 0x80)

15:39:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
syz_open_dev$dri(&(0x7f0000000240), 0x4, 0x280)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0xb09, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3ff}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4004000)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x40}}}, 0x18)
mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r2}, 0x8)

15:39:50 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x1000}, r1}}, 0x30)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000380)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, "0ccb47", "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"}}, 0x110)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={<r4=>0xffffffffffffffff}, 0x106, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x2, {0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, r4}}, 0x38)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r5}}, 0x30)

15:39:50 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={<r4=>0xffffffffffffffff}, 0x17, 0x9}}, 0x20) (async)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000380)={0x9, 0x108, 0xfa00, {r4, 0x2, "f84f19", "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"}}, 0x110) (async)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x9, 0x7fff]}], r6, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x35}, 0x1f}, r6}}, 0x30) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x100}}, 0x10)

15:39:50 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
write$P9_ROPEN(r2, &(0x7f0000000140)={0x18, 0x71, 0x3, {{0x0, 0x0, 0x1}}}, 0x4e)
accept$nfc_llcp(r1, &(0x7f0000000000), &(0x7f0000000100)=0x60)

15:39:50 executing program 0:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x60814}, 0x20000000) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:50 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
write$P9_ROPEN(r2, &(0x7f0000000140)={0x18, 0x71, 0x3, {{0x0, 0x0, 0x1}}}, 0x4e)
accept$nfc_llcp(r1, &(0x7f0000000000), &(0x7f0000000100)=0x60)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000180), 0x80) (async)
write$P9_ROPEN(r2, &(0x7f0000000140)={0x18, 0x71, 0x3, {{0x0, 0x0, 0x1}}}, 0x4e) (async)
accept$nfc_llcp(r1, &(0x7f0000000000), &(0x7f0000000100)=0x60) (async)

15:39:50 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x105802)
ioctl$SG_BLKTRACESTART(r1, 0x1274, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3, 0xff, 0xffffffff, 0x83, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3, 0x6}, 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x8, 0x7, 0x8, 0xa6, 0x1, 0xffffffffffffffff, 0x1000200, '\x00', 0x0, r1, 0x2, 0x0, 0x4}, 0x48)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000500)={0xb, 0x10, 0xfa00, {&(0x7f0000000440), 0xffffffffffffffff, 0x7fff}}, 0x18) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6a1f1d88}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000080)='syzkaller\x00', 0x90f8, 0x2f, &(0x7f0000000200)=""/47, 0x40f00, 0xa, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x10, 0xffff7fff, 0x800}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0x1, r3, 0xffffffffffffffff, r4, 0x1, 0x1]}, 0x80)

15:39:50 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x1000}, r1}}, 0x30) (async, rerun: 32)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (rerun: 32)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000380)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, "0ccb47", "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"}}, 0x110)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={<r4=>0xffffffffffffffff}, 0x106, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x2, {0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, r4}}, 0x38)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r5}}, 0x30)

15:39:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async)
syz_open_dev$dri(&(0x7f0000000240), 0x4, 0x280)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0xb09, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3ff}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x40}}}, 0x18)
mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r2}, 0x8)

15:39:50 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x105802)
ioctl$SG_BLKTRACESTART(r1, 0x1274, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3, 0xff, 0xffffffff, 0x83, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3, 0x6}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x8, 0x7, 0x8, 0xa6, 0x1, 0xffffffffffffffff, 0x1000200, '\x00', 0x0, r1, 0x2, 0x0, 0x4}, 0x48) (async)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) (async)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000500)={0xb, 0x10, 0xfa00, {&(0x7f0000000440), 0xffffffffffffffff, 0x7fff}}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6a1f1d88}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000080)='syzkaller\x00', 0x90f8, 0x2f, &(0x7f0000000200)=""/47, 0x40f00, 0xa, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x10, 0xffff7fff, 0x800}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0x1, r3, 0xffffffffffffffff, r4, 0x1, 0x1]}, 0x80)

15:39:50 executing program 0:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x60814}, 0x20000000)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:50 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
write$P9_ROPEN(r2, &(0x7f0000000140)={0x18, 0x71, 0x3, {{0x0, 0x0, 0x1}}}, 0x4e)
accept$nfc_llcp(r1, &(0x7f0000000000), &(0x7f0000000100)=0x60)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000180), 0x80) (async)
write$P9_ROPEN(r2, &(0x7f0000000140)={0x18, 0x71, 0x3, {{0x0, 0x0, 0x1}}}, 0x4e) (async)
accept$nfc_llcp(r1, &(0x7f0000000000), &(0x7f0000000100)=0x60) (async)

15:39:50 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) (async)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={<r4=>0xffffffffffffffff}, 0x17, 0x9}}, 0x20)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x0) (async)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000380)={0x9, 0x108, 0xfa00, {r4, 0x2, "f84f19", "50b4c0605b4b9bbbc09922ec808ae82a9762d1564b66aa6927124bd829186cadae10980ff132660d9dca312765703f047dc0e2c7765afafbdc784829c94e262ff7ec8e7893bc2a7133d29d9a94b9ec4dbd65c107a119bb8b390b5d628ec3e7b5b48af24fcc8f976afeafd6853ebf9d22b705683ce5a1ef3cd2813a749755f8c029ca5f4e7df731d8eb7c21d68cf6ec28b5bd74f360088774b24d022f2ccc23ce0a6dc285c134bd1173afab465f580ac5558167bfc1b87a4f08d25c67d9e473de984cebfbb73e2e256f5685244f3d995a39d78809af220d77d7275ee497ce85657c963ad9bc1696b93d780b351e275f5f8c740dea5b0da8651cdefcb9f0d5f31a"}}, 0x110)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x9, 0x7fff]}], r6, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x35}, 0x1f}, r6}}, 0x30) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x100}}, 0x10)

15:39:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
syz_open_dev$dri(&(0x7f0000000240), 0x4, 0x280) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0xb09, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3ff}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4004000)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x40}}}, 0x18) (async, rerun: 32)
mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (rerun: 32)
bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r2}, 0x8)

15:39:50 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x1000}, r1}}, 0x30)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000380)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, "0ccb47", "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"}}, 0x110)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={<r4=>0xffffffffffffffff}, 0x106, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x2, {0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, r4}}, 0x38)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r5}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x13f, 0x4}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x1000}, r1}}, 0x30) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000380)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, "0ccb47", "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"}}, 0x110) (async)
pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x6}}, 0x20) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x2, {0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, r4}}, 0x38) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r5}}, 0x30) (async)

15:39:50 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)
write$P9_RXATTRCREATE(r2, &(0x7f0000000100)={0x7, 0x21, 0x2}, 0x7)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x8001, 0x5, 0x40})

15:39:50 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r5, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r5}}, 0x18)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {r3, 0x8, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @local}, @ib={0x1b, 0x800, 0x81, {"9ecdfebe453fb341a9a84a2c31762b71"}, 0x5, 0x7, 0x2}}}, 0x118)

15:39:50 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x3f}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0xc040)

15:39:50 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)
write$P9_RXATTRCREATE(r2, &(0x7f0000000100)={0x7, 0x21, 0x2}, 0x7) (async)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x8001, 0x5, 0x40})

15:39:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={'ip_vti0\x00', <r2=>0x0, 0x1, 0x700, 0x61, 0x8, {{0x19, 0x4, 0x1, 0x3, 0x64, 0x67, 0x0, 0x1e, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x4c, 0xcd, 0x1, 0x9, [{@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xffffffab}, {@rand_addr=0x64010102}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}, {@multicast2, 0x8}, {@empty, 0x3}, {@loopback, 0xd9}, {@local, 0x5}]}, @end]}}}}})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x10c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x1801}, 0x44)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x73d}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}]}, 0x40}, 0x1, 0x0, 0x0, 0x94}, 0x20008050)

15:39:50 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x3f}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0xc040)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x3f}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0xc040) (async)

15:39:50 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x0, {0xa, 0x4e20, 0x1ff, @loopback, 0x800}, r1}}, 0x38)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r5, 0x1, 0x1, 0x90}}, 0x20)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x0, {0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, r5}}, 0x38)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)

15:39:50 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
r3 = accept4$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x800)
setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000200)=0x3, 0x4)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r2, r4}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000280)={0x1, 0x16, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:50 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8)
write$P9_RXATTRCREATE(r2, &(0x7f0000000100)={0x7, 0x21, 0x2}, 0x7)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x8001, 0x5, 0x40})
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) (async)
write$P9_RXATTRCREATE(r2, &(0x7f0000000100)={0x7, 0x21, 0x2}, 0x7) (async)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x8001, 0x5, 0x40}) (async)

15:39:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={'ip_vti0\x00', <r2=>0x0, 0x1, 0x700, 0x61, 0x8, {{0x19, 0x4, 0x1, 0x3, 0x64, 0x67, 0x0, 0x1e, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x4c, 0xcd, 0x1, 0x9, [{@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xffffffab}, {@rand_addr=0x64010102}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}, {@multicast2, 0x8}, {@empty, 0x3}, {@loopback, 0xd9}, {@local, 0x5}]}, @end]}}}}})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x10c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x1801}, 0x44)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x73d}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}]}, 0x40}, 0x1, 0x0, 0x0, 0x94}, 0x20008050)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x1, 0x700, 0x61, 0x8, {{0x19, 0x4, 0x1, 0x3, 0x64, 0x67, 0x0, 0x1e, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x4c, 0xcd, 0x1, 0x9, [{@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xffffffab}, {@rand_addr=0x64010102}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}, {@multicast2, 0x8}, {@empty, 0x3}, {@loopback, 0xd9}, {@local, 0x5}]}, @end]}}}}}) (async)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x10c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x1801}, 0x44) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x73d}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}]}, 0x40}, 0x1, 0x0, 0x0, 0x94}, 0x20008050) (async)

15:39:51 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20) (async, rerun: 64)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async, rerun: 64)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r5, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r5}}, 0x18)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {r3, 0x8, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @local}, @ib={0x1b, 0x800, 0x81, {"9ecdfebe453fb341a9a84a2c31762b71"}, 0x5, 0x7, 0x2}}}, 0x118)

15:39:51 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x3f}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0xc040)

15:39:51 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000080)={0x80000000, &(0x7f0000000040), &(0x7f0000000100)=[{{}, {<r1=>0x80000000}}]})
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000180)={{0x80000000, 0x0, 0x2, [0x3, 0x3]}, {r1, 0x0, 0x2, [0x4]}, 0x10000000, [0x7f, 0x36]})
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={'ip_vti0\x00', <r2=>0x0, 0x1, 0x700, 0x61, 0x8, {{0x19, 0x4, 0x1, 0x3, 0x64, 0x67, 0x0, 0x1e, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x4c, 0xcd, 0x1, 0x9, [{@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xffffffab}, {@rand_addr=0x64010102}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}, {@multicast2, 0x8}, {@empty, 0x3}, {@loopback, 0xd9}, {@local, 0x5}]}, @end]}}}}})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x10c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x1801}, 0x44)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x73d}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}]}, 0x40}, 0x1, 0x0, 0x0, 0x94}, 0x20008050)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x1, 0x700, 0x61, 0x8, {{0x19, 0x4, 0x1, 0x3, 0x64, 0x67, 0x0, 0x1e, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x4c, 0xcd, 0x1, 0x9, [{@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xffffffab}, {@rand_addr=0x64010102}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}, {@multicast2, 0x8}, {@empty, 0x3}, {@loopback, 0xd9}, {@local, 0x5}]}, @end]}}}}}) (async)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x10c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x1801}, 0x44) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x73d}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}]}, 0x40}, 0x1, 0x0, 0x0, 0x94}, 0x20008050) (async)

15:39:51 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x0, {0xa, 0x4e20, 0x1ff, @loopback, 0x800}, r1}}, 0x38)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r5, 0x1, 0x1, 0x90}}, 0x20)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x0, {0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, r5}}, 0x38)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x0, {0xa, 0x4e20, 0x1ff, @loopback, 0x800}, r1}}, 0x38) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r5, 0x1, 0x1, 0x90}}, 0x20) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x0, {0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, r5}}, 0x38) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30) (async)

15:39:51 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000080)={0x80000000, &(0x7f0000000040), &(0x7f0000000100)=[{{}, {<r1=>0x80000000}}]})
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000180)={{0x80000000, 0x0, 0x2, [0x3, 0x3]}, {r1, 0x0, 0x2, [0x4]}, 0x10000000, [0x7f, 0x36]})
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:51 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000040)=0xd, 0x4)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000000)
pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xca25}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xff00}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000440)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x3, {0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x101}}}, 0x38)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r5, 0xa00, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x99}]}, 0x30}}, 0x40448d0)

15:39:51 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000080)={0x80000000, &(0x7f0000000040), &(0x7f0000000100)=[{{}, {<r1=>0x80000000}}]})
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000180)={{0x80000000, 0x0, 0x2, [0x3, 0x3]}, {r1, 0x0, 0x2, [0x4]}, 0x10000000, [0x7f, 0x36]})
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000080)={0x80000000, &(0x7f0000000040), &(0x7f0000000100)}) (async)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000180)={{0x80000000, 0x0, 0x2, [0x3, 0x3]}, {r1, 0x0, 0x2, [0x4]}, 0x10000000, [0x7f, 0x36]}) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)

15:39:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20402000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x2c}}, 0x3000c804)

15:39:51 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
r3 = accept4$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x800)
setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000200)=0x3, 0x4)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r2, r4}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000280)={0x1, 0x16, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
accept4$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x800) (async)
setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000200)=0x3, 0x4) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r2, r4}}, 0x18) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000280)={0x1, 0x16, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) (async)

15:39:51 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20) (async, rerun: 32)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async, rerun: 32)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r5, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r5}}, 0x18) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {r3, 0x8, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @local}, @ib={0x1b, 0x800, 0x81, {"9ecdfebe453fb341a9a84a2c31762b71"}, 0x5, 0x7, 0x2}}}, 0x118)

15:39:51 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x1)

15:39:51 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000040)=0xd, 0x4)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000000) (async)
pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xca25}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xff00}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000440)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x3, {0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x101}}}, 0x38) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r5, 0xa00, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x99}]}, 0x30}}, 0x40448d0)

15:39:51 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x1)

15:39:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20402000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x2c}}, 0x3000c804)

15:39:51 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000040)=0xd, 0x4) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000000) (async, rerun: 32)
pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80) (async, rerun: 32)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xca25}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xff00}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000440)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x3, {0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x101}}}, 0x38)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r5, 0xa00, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x99}]}, 0x30}}, 0x40448d0)

15:39:51 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x0, {0xa, 0x4e20, 0x1ff, @loopback, 0x800}, r1}}, 0x38) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20) (async, rerun: 32)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 32)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r5, 0x1, 0x1, 0x90}}, 0x20)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x0, {0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, r5}}, 0x38) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)

15:39:51 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x1)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x1) (async)

15:39:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20402000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x2c}}, 0x3000c804)

15:39:51 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
r3 = accept4$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x800)
setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000200)=0x3, 0x4)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r2, r4}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000280)={0x1, 0x16, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
accept4$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x800) (async)
setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000200)=0x3, 0x4) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r2, r4}}, 0x18) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000280)={0x1, 0x16, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) (async)

15:39:51 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r3)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x40, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x24, 0xa, '/proc/sys/net/ipv4/vs/pmtu_disc\x00'}]}, 0x40}}, 0x0)
r5 = socket(0x2a, 0x1, 0x7fff)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r6, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x74, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x20048800)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r8, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x0, r8, 0x30, 0x1, @ib={0x1b, 0xfff, 0x101, {"489571a009972856d24f30e97dd305a0"}, 0x3f, 0x4, 0x8000}}}, 0xa0)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r10=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r10, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r10}}, 0x18)

15:39:51 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x58080)

15:39:51 executing program 3:
socketpair(0xb, 0x5, 0x9, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)=[{}, {{}, {<r1=>0x80000000}}]})
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000180)={{r1, 0x0, 0x0, [0x4, 0x42be]}, {0x80000000, 0x0, 0x7, [0x7]}, 0x4, [0x9, 0x8]})
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="6b9fd008dcd9bbaf4a476c7da11af968", 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r2, 0x0)

15:39:51 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/198, 0xc6, 0x0, &(0x7f0000000040)=""/74, 0x4a}, &(0x7f0000000240)=0x40)

15:39:51 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/198, 0xc6, 0x0, &(0x7f0000000040)=""/74, 0x4a}, &(0x7f0000000240)=0x40)

15:39:51 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x58080)

15:39:51 executing program 3:
socketpair(0xb, 0x5, 0x9, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)=[{}, {{}, {<r1=>0x80000000}}]})
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000180)={{r1, 0x0, 0x0, [0x4, 0x42be]}, {0x80000000, 0x0, 0x7, [0x7]}, 0x4, [0x9, 0x8]})
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="6b9fd008dcd9bbaf4a476c7da11af968", 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r2, 0x0)
socketpair(0xb, 0x5, 0x9, &(0x7f0000000000)) (async)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)}) (async)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000180)={{r1, 0x0, 0x0, [0x4, 0x42be]}, {0x80000000, 0x0, 0x7, [0x7]}, 0x4, [0x9, 0x8]}) (async)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="6b9fd008dcd9bbaf4a476c7da11af968", 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r2, 0x0) (async)

15:39:51 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x58080)

[  740.645333] nbd: must specify at least one socket
15:39:51 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000000)={0xa, 0x4}, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x2, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x3, {0x0, 0x2, "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", 0x7f, 0x0, 0x3, 0x20, 0xff, 0x4d, 0x57, 0x1}, r2}}, 0x128)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x80}, r3}}, 0x30)

15:39:51 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/198, 0xc6, 0x0, &(0x7f0000000040)=""/74, 0x4a}, &(0x7f0000000240)=0x40)

15:39:51 executing program 3:
socketpair(0xb, 0x5, 0x9, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)=[{}, {{}, {<r1=>0x80000000}}]})
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000180)={{r1, 0x0, 0x0, [0x4, 0x42be]}, {0x80000000, 0x0, 0x7, [0x7]}, 0x4, [0x9, 0x8]}) (async)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="6b9fd008dcd9bbaf4a476c7da11af968", 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r2, 0x0)

15:39:51 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
socketpair(0x5b, 0x800, 0x8db, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="559d76397f1f683229caba1f7966ff16", 0x10)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:51 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r3)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x40, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x24, 0xa, '/proc/sys/net/ipv4/vs/pmtu_disc\x00'}]}, 0x40}}, 0x0)
r5 = socket(0x2a, 0x1, 0x7fff)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r6, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x74, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x20048800)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r8, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x0, r8, 0x30, 0x1, @ib={0x1b, 0xfff, 0x101, {"489571a009972856d24f30e97dd305a0"}, 0x3f, 0x4, 0x8000}}}, 0xa0)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r10=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r10, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r10}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r3) (async)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x40, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x24, 0xa, '/proc/sys/net/ipv4/vs/pmtu_disc\x00'}]}, 0x40}}, 0x0) (async)
socket(0x2a, 0x1, 0x7fff) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r6, &(0x7f0000000940)={0x18}, 0x18) (async)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x74, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x20048800) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r8, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x0, r8, 0x30, 0x1, @ib={0x1b, 0xfff, 0x101, {"489571a009972856d24f30e97dd305a0"}, 0x3f, 0x4, 0x8000}}}, 0xa0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r10, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r10}}, 0x18) (async)

15:39:51 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf25000000000c001000060000200000000005001300ff000000058b7116ca0000000500120006000000050007000200000006001b004e24000006000300f0a90000"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x80)
r1 = accept$nfc_llcp(r0, &(0x7f0000000300), &(0x7f0000000240)=0x60)
getsockopt$nfc_llcp(r1, 0x118, 0x2, &(0x7f0000000280)=""/89, 0x59)
accept4$nfc_llcp(r1, &(0x7f00000001c0), &(0x7f0000000380)=0x60, 0x800)

15:39:51 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x2, 0x80, 0x87, 0x0, 0x9, 0x5, 0x0, 0x5, 0x2042b, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80, 0x1, @perf_config_ext={0x5ce, 0x100000001}, 0x8, 0x200, 0x4, 0x6, 0x9, 0xe080, 0x7, 0x0, 0x3, 0x0, 0x3})

15:39:51 executing program 3:
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:51 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000000)={0xa, 0x4}, 0xc) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x2, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x3, {0x0, 0x2, "b4ab00196dde141efec470148b87d79d0d279654b8e56e20ad5eebd252a0b7974a0f9c4b06c8ddd229c86a2b1597acb67d975804569075e730eaead14fd84bb9d596ecfb5e87bcff74b1a46e5f593a3f5d16883bb15acb91f38282676ecb453ba74e9bacbcb780a2955e32e4ee17f4a5aa0ddb94f144f0624e8e2654a5cfe6c8bd978504070db9c79d11a80fdc14bbe1cbf0b21c0aa1283539f5c5a7be2b2291aeaffe23bea3f3f98958d20e4ef67d4e55df26f554b667f5917aad197bbf6dafe62d4bef5912840e29521fdfaa776b4baf77bf6152bb2b299b110252ef421b208e83346d4a9e080a839f6525a2af3854cdb78026fa45fe86470d7cef211a3bf2", 0x7f, 0x0, 0x3, 0x20, 0xff, 0x4d, 0x57, 0x1}, r2}}, 0x128) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x80}, r3}}, 0x30)

15:39:51 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
socketpair(0x5b, 0x800, 0x8db, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000080), 0x80800)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="559d76397f1f683229caba1f7966ff16", 0x10)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
socketpair(0x5b, 0x800, 0x8db, &(0x7f0000000000)) (async)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000080), 0x80800) (async)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="559d76397f1f683229caba1f7966ff16", 0x10) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) (async)

15:39:51 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf25000000000c001000060000200000000005001300ff000000058b7116ca0000000500120006000000050007000200000006001b004e24000006000300f0a90000"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x80)
r1 = accept$nfc_llcp(r0, &(0x7f0000000300), &(0x7f0000000240)=0x60)
getsockopt$nfc_llcp(r1, 0x118, 0x2, &(0x7f0000000280)=""/89, 0x59)
accept4$nfc_llcp(r1, &(0x7f00000001c0), &(0x7f0000000380)=0x60, 0x800)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf25000000000c001000060000200000000005001300ff000000058b7116ca0000000500120006000000050007000200000006001b004e24000006000300f0a90000"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x80) (async)
accept$nfc_llcp(r0, &(0x7f0000000300), &(0x7f0000000240)=0x60) (async)
getsockopt$nfc_llcp(r1, 0x118, 0x2, &(0x7f0000000280)=""/89, 0x59) (async)
accept4$nfc_llcp(r1, &(0x7f00000001c0), &(0x7f0000000380)=0x60, 0x800) (async)

15:39:51 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x2, 0x80, 0x87, 0x0, 0x9, 0x5, 0x0, 0x5, 0x2042b, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80, 0x1, @perf_config_ext={0x5ce, 0x100000001}, 0x8, 0x200, 0x4, 0x6, 0x9, 0xe080, 0x7, 0x0, 0x3, 0x0, 0x3})

15:39:51 executing program 3:
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:51 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000000)={0xa, 0x4}, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x2, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x3, {0x0, 0x2, "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", 0x7f, 0x0, 0x3, 0x20, 0xff, 0x4d, 0x57, 0x1}, r2}}, 0x128)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x80}, r3}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000000)={0xa, 0x4}, 0xc) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x2, 0x1}}, 0x20) (async)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x3, {0x0, 0x2, "b4ab00196dde141efec470148b87d79d0d279654b8e56e20ad5eebd252a0b7974a0f9c4b06c8ddd229c86a2b1597acb67d975804569075e730eaead14fd84bb9d596ecfb5e87bcff74b1a46e5f593a3f5d16883bb15acb91f38282676ecb453ba74e9bacbcb780a2955e32e4ee17f4a5aa0ddb94f144f0624e8e2654a5cfe6c8bd978504070db9c79d11a80fdc14bbe1cbf0b21c0aa1283539f5c5a7be2b2291aeaffe23bea3f3f98958d20e4ef67d4e55df26f554b667f5917aad197bbf6dafe62d4bef5912840e29521fdfaa776b4baf77bf6152bb2b299b110252ef421b208e83346d4a9e080a839f6525a2af3854cdb78026fa45fe86470d7cef211a3bf2", 0x7f, 0x0, 0x3, 0x20, 0xff, 0x4d, 0x57, 0x1}, r2}}, 0x128) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x80}, r3}}, 0x30) (async)

15:39:51 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf25000000000c001000060000200000000005001300ff000000058b7116ca0000000500120006000000050007000200000006001b004e24000006000300f0a90000"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x80)
r1 = accept$nfc_llcp(r0, &(0x7f0000000300), &(0x7f0000000240)=0x60)
getsockopt$nfc_llcp(r1, 0x118, 0x2, &(0x7f0000000280)=""/89, 0x59)
accept4$nfc_llcp(r1, &(0x7f00000001c0), &(0x7f0000000380)=0x60, 0x800)

15:39:51 executing program 3:
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)

[  740.874183] nbd: must specify at least one socket
15:39:51 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r3)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x40, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x24, 0xa, '/proc/sys/net/ipv4/vs/pmtu_disc\x00'}]}, 0x40}}, 0x0)
r5 = socket(0x2a, 0x1, 0x7fff) (async)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r6, &(0x7f0000000940)={0x18}, 0x18) (async, rerun: 64)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x74, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x20048800) (rerun: 64)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r8, 0x1, 0x1, 0x90}}, 0x20) (async, rerun: 64)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x0, r8, 0x30, 0x1, @ib={0x1b, 0xfff, 0x101, {"489571a009972856d24f30e97dd305a0"}, 0x3f, 0x4, 0x8000}}}, 0xa0) (async, rerun: 64)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r10=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r10, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r10}}, 0x18)

15:39:51 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x2, 0x80, 0x87, 0x0, 0x9, 0x5, 0x0, 0x5, 0x2042b, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80, 0x1, @perf_config_ext={0x5ce, 0x100000001}, 0x8, 0x200, 0x4, 0x6, 0x9, 0xe080, 0x7, 0x0, 0x3, 0x0, 0x3})
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x2, 0x80, 0x87, 0x0, 0x9, 0x5, 0x0, 0x5, 0x2042b, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80, 0x1, @perf_config_ext={0x5ce, 0x100000001}, 0x8, 0x200, 0x4, 0x6, 0x9, 0xe080, 0x7, 0x0, 0x3, 0x0, 0x3}) (async)

15:39:51 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100))
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x7f, 0x81, 0x0, 0x2, 0x6277}, 0x14)
write$P9_RMKNOD(r2, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x20, 0x0, 0x7}}, 0x14)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="05d0a70ef790c2cc9be01ec1bc1a9634", 0x10)

15:39:51 executing program 3:
shmget(0x1, 0x3000, 0x80, &(0x7f0000ffb000/0x3000)=nil)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
add_key$fscrypt_v1(&(0x7f00000006c0), 0x0, 0x0, 0x0, 0xfffffffffffffff9)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:51 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
socketpair(0x5b, 0x800, 0x8db, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000080), 0x80800) (async)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="559d76397f1f683229caba1f7966ff16", 0x10) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:51 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x3, {0x2, 0x9, "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", 0x16, 0x6, 0x4, 0x1, 0x7, 0x1, 0x4, 0x1}, r1}}, 0x128)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}], r4, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0xa, 0x4, 0xfa00, {r4}}, 0xc)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)

15:39:51 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100))
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x7f, 0x81, 0x0, 0x2, 0x6277}, 0x14)
write$P9_RMKNOD(r2, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x20, 0x0, 0x7}}, 0x14)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="05d0a70ef790c2cc9be01ec1bc1a9634", 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100)) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x7f, 0x81, 0x0, 0x2, 0x6277}, 0x14) (async)
write$P9_RMKNOD(r2, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x20, 0x0, 0x7}}, 0x14) (async)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="05d0a70ef790c2cc9be01ec1bc1a9634", 0x10) (async)

15:39:51 executing program 3:
shmget(0x1, 0x3000, 0x80, &(0x7f0000ffb000/0x3000)=nil) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
add_key$fscrypt_v1(&(0x7f00000006c0), 0x0, 0x0, 0x0, 0xfffffffffffffff9)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:51 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x3, {0x2, 0x9, "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", 0x16, 0x6, 0x4, 0x1, 0x7, 0x1, 0x4, 0x1}, r1}}, 0x128) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20) (async)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}], r4, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0xa, 0x4, 0xfa00, {r4}}, 0xc) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)

15:39:51 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000c8cf}, 0x24000881)

15:39:51 executing program 3:
shmget(0x1, 0x3000, 0x80, &(0x7f0000ffb000/0x3000)=nil)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
add_key$fscrypt_v1(&(0x7f00000006c0), 0x0, 0x0, 0x0, 0xfffffffffffffff9)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
shmget(0x1, 0x3000, 0x80, &(0x7f0000ffb000/0x3000)=nil) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
add_key$fscrypt_v1(&(0x7f00000006c0), 0x0, 0x0, 0x0, 0xfffffffffffffff9) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)

[  741.046189] nbd: must specify at least one socket
15:39:51 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100))
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x7f, 0x81, 0x0, 0x2, 0x6277}, 0x14)
write$P9_RMKNOD(r2, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x20, 0x0, 0x7}}, 0x14)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="05d0a70ef790c2cc9be01ec1bc1a9634", 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100)) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x7f, 0x81, 0x0, 0x2, 0x6277}, 0x14) (async)
write$P9_RMKNOD(r2, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x20, 0x0, 0x7}}, 0x14) (async)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="05d0a70ef790c2cc9be01ec1bc1a9634", 0x10) (async)

15:39:51 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4, 0xfa00, {r4}}, 0xc)

15:39:51 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000c8cf}, 0x24000881)

15:39:51 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x111, 0xb}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400}, r4}}, 0x30)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:51 executing program 5:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4010, r0, 0x6)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
socketpair(0x1d, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xbf9b}, @L2TP_ATTR_VLAN_ID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x80, @local, 0x7}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @broadcast}], 0x4c)

15:39:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:51 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x3, {0x2, 0x9, "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", 0x16, 0x6, 0x4, 0x1, 0x7, 0x1, 0x4, 0x1}, r1}}, 0x128) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20) (async)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}], r4, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0xa, 0x4, 0xfa00, {r4}}, 0xc)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x30)

15:39:51 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000c8cf}, 0x24000881)

15:39:51 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4, 0xfa00, {r4}}, 0xc)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4, 0xfa00, {r4}}, 0xc) (async)

15:39:51 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x111, 0xb}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400}, r4}}, 0x30)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:52 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18, 0x71, 0x4, {{0x80}, 0x57f}}, 0x18)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, {}], r3, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r3, 0x83a, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x1, @local, 0x40}, @in6={0xa, 0x4e21, 0x4, @private2, 0x112}}}, 0x118)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0xa)

15:39:52 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18, 0x71, 0x0, {{}, 0x10000}}, 0x1b)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x80, @mcast2, 0xfff}, r1}}, 0x30)

15:39:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

[  741.236207] can: request_module (can-proto-0) failed.
15:39:52 executing program 5:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4010, r0, 0x6)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
socketpair(0x1d, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xbf9b}, @L2TP_ATTR_VLAN_ID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x80, @local, 0x7}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @broadcast}], 0x4c)

15:39:52 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18, 0x71, 0x4, {{0x80}, 0x57f}}, 0x18)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, {}], r3, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r3, 0x83a, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x1, @local, 0x40}, @in6={0xa, 0x4e21, 0x4, @private2, 0x112}}}, 0x118)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0xa)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18, 0x71, 0x4, {{0x80}, 0x57f}}, 0x18) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, {}], r3, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r3, 0x83a, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x1, @local, 0x40}, @in6={0xa, 0x4e21, 0x4, @private2, 0x112}}}, 0x118) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)
pipe2$watch_queue(&(0x7f0000000080), 0x80) (async)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0xa) (async)

15:39:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x5d0, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x800)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x5d0, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x800) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:52 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18, 0x71, 0x0, {{}, 0x10000}}, 0x1b) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x80, @mcast2, 0xfff}, r1}}, 0x30)

15:39:52 executing program 5:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4010, r0, 0x6)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
socketpair(0x1d, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xbf9b}, @L2TP_ATTR_VLAN_ID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x80, @local, 0x7}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @broadcast}], 0x4c)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18) (async)
mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4010, r0, 0x6) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
socketpair(0x1d, 0xa, 0x0, &(0x7f0000000000)) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xbf9b}, @L2TP_ATTR_VLAN_ID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x80, @local, 0x7}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @broadcast}], 0x4c) (async)

[  741.343240] can: request_module (can-proto-0) failed.
15:39:52 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4, 0xfa00, {r4}}, 0xc)

15:39:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x5d0, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x800)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:52 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x111, 0xb}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400}, r4}}, 0x30)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x111, 0xb}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400}, r4}}, 0x30) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)

15:39:52 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18, 0x71, 0x4, {{0x80}, 0x57f}}, 0x18)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, {}], r3, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r3, 0x83a, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x1, @local, 0x40}, @in6={0xa, 0x4e21, 0x4, @private2, 0x112}}}, 0x118)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0xa)

15:39:52 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20) (async, rerun: 64)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (rerun: 64)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18, 0x71, 0x0, {{}, 0x10000}}, 0x1b) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x80, @mcast2, 0xfff}, r1}}, 0x30)

15:39:52 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
accept4$nfc_llcp(r1, 0x0, &(0x7f0000000000), 0x80000)

15:39:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r3, 0x200, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x4}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x44001)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000940)={0x18}, 0x18)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
write$P9_ROPEN(r6, &(0x7f0000000940)={0x18}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000380)={'team0\x00', <r7=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', <r8=>r4, 0x20, 0x1, 0x67, 0x1, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @empty, {[@ra={0x94, 0x4, 0x1}, @generic={0x82, 0xb, "2ca288a503ffbea924"}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', <r9=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000004c0)={'erspan0\x00', <r10=>r4, 0x7, 0x0, 0x8, 0x251, {{0x20, 0x4, 0x0, 0x3e, 0x80, 0x68, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@generic={0x86, 0xd, "bc3cacc0883a3568ec9360"}, @generic={0x94, 0x8, "5f72b15527d6"}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x97, [@multicast1]}, @generic={0x88, 0xc, "37d8b6ff4966c88efac4"}, @noop, @timestamp_addr={0x44, 0x2c, 0x35, 0x1, 0x4, [{@local, 0x8}, {@remote, 0x6}, {@multicast2, 0x400}, {@broadcast}, {@rand_addr=0x64010101, 0x400}]}, @lsrr={0x83, 0x7, 0x1b, [@empty]}, @lsrr={0x83, 0xb, 0x9b, [@loopback, @multicast2]}]}}}}})
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000980)={0x33c, r3, 0x20, 0x70bd28, 0xfffffff7, {}, [{{0x8, 0x1, r7}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x40000}, 0x8094)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@generic={0x81, 0x1, 0x0, 0x2, 0x9}, @call={0x85, 0x0, 0x0, 0x90}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xf}, @alu={0x7, 0x1, 0xc, 0x2, 0x8, 0x19, 0xfffffffffffffff0}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x2, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000080)='syzkaller\x00', 0x1ff, 0xca, &(0x7f00000000c0)=""/202, 0x0, 0x11, '\x00', r4, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x4, 0x6, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r5, r6]}, 0x80)

[  741.409362] can: request_module (can-proto-0) failed.
15:39:52 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
accept4$nfc_llcp(r1, 0x0, &(0x7f0000000000), 0x80000)

15:39:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r3, 0x200, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x4}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x44001)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000940)={0x18}, 0x18)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
write$P9_ROPEN(r6, &(0x7f0000000940)={0x18}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000380)={'team0\x00', <r7=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', <r8=>r4, 0x20, 0x1, 0x67, 0x1, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @empty, {[@ra={0x94, 0x4, 0x1}, @generic={0x82, 0xb, "2ca288a503ffbea924"}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', <r9=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000004c0)={'erspan0\x00', <r10=>r4, 0x7, 0x0, 0x8, 0x251, {{0x20, 0x4, 0x0, 0x3e, 0x80, 0x68, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@generic={0x86, 0xd, "bc3cacc0883a3568ec9360"}, @generic={0x94, 0x8, "5f72b15527d6"}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x97, [@multicast1]}, @generic={0x88, 0xc, "37d8b6ff4966c88efac4"}, @noop, @timestamp_addr={0x44, 0x2c, 0x35, 0x1, 0x4, [{@local, 0x8}, {@remote, 0x6}, {@multicast2, 0x400}, {@broadcast}, {@rand_addr=0x64010101, 0x400}]}, @lsrr={0x83, 0x7, 0x1b, [@empty]}, @lsrr={0x83, 0xb, 0x9b, [@loopback, @multicast2]}]}}}}})
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000980)={0x33c, r3, 0x20, 0x70bd28, 0xfffffff7, {}, [{{0x8, 0x1, r7}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x40000}, 0x8094)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@generic={0x81, 0x1, 0x0, 0x2, 0x9}, @call={0x85, 0x0, 0x0, 0x90}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xf}, @alu={0x7, 0x1, 0xc, 0x2, 0x8, 0x19, 0xfffffffffffffff0}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x2, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000080)='syzkaller\x00', 0x1ff, 0xca, &(0x7f00000000c0)=""/202, 0x0, 0x11, '\x00', r4, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x4, 0x6, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r5, r6]}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)) (async)
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r3, 0x200, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x4}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x44001) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r5, &(0x7f0000000940)={0x18}, 0x18) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r6, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000380)) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', r4, 0x20, 0x1, 0x67, 0x1, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @empty, {[@ra={0x94, 0x4, 0x1}, @generic={0x82, 0xb, "2ca288a503ffbea924"}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000004c0)={'erspan0\x00', r4, 0x7, 0x0, 0x8, 0x251, {{0x20, 0x4, 0x0, 0x3e, 0x80, 0x68, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@generic={0x86, 0xd, "bc3cacc0883a3568ec9360"}, @generic={0x94, 0x8, "5f72b15527d6"}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x97, [@multicast1]}, @generic={0x88, 0xc, "37d8b6ff4966c88efac4"}, @noop, @timestamp_addr={0x44, 0x2c, 0x35, 0x1, 0x4, [{@local, 0x8}, {@remote, 0x6}, {@multicast2, 0x400}, {@broadcast}, {@rand_addr=0x64010101, 0x400}]}, @lsrr={0x83, 0x7, 0x1b, [@empty]}, @lsrr={0x83, 0xb, 0x9b, [@loopback, @multicast2]}]}}}}}) (async)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000980)={0x33c, r3, 0x20, 0x70bd28, 0xfffffff7, {}, [{{0x8, 0x1, r7}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x40000}, 0x8094) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@generic={0x81, 0x1, 0x0, 0x2, 0x9}, @call={0x85, 0x0, 0x0, 0x90}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xf}, @alu={0x7, 0x1, 0xc, 0x2, 0x8, 0x19, 0xfffffffffffffff0}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x2, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000080)='syzkaller\x00', 0x1ff, 0xca, &(0x7f00000000c0)=""/202, 0x0, 0x11, '\x00', r4, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x4, 0x6, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r5, r6]}, 0x80) (async)

15:39:52 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x31, @loopback, 0x800}}}, 0x30)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
write$P9_RATTACH(r0, &(0x7f00000000c0)={0x14, 0x69, 0x2, {0x1, 0x4, 0x1}}, 0x14)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffd20)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x50, r1, 0xe486f000)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:52 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
accept4$nfc_llcp(r1, 0x0, &(0x7f0000000000), 0x80000)

15:39:52 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40814}, 0x80)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))

15:39:52 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x31, @loopback, 0x800}}}, 0x30)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
write$P9_RATTACH(r0, &(0x7f00000000c0)={0x14, 0x69, 0x2, {0x1, 0x4, 0x1}}, 0x14) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffd20)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x50, r1, 0xe486f000)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:52 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000480)={0x0, 0x5, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x3, 0x0, &(0x7f0000000380)=[{}, {}, {0x0, <r2=>0x80000000}], 0x2, 0x0, &(0x7f0000000400)=[{}, {}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000580)={r2, &(0x7f0000000040), &(0x7f0000000500)})
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000005c0)="911a923181ed111399f6f85e26c0ff3b", 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:52 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:52 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40814}, 0x80)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))

15:39:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r3, 0x200, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x4}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x44001)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000940)={0x18}, 0x18) (async)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
write$P9_ROPEN(r6, &(0x7f0000000940)={0x18}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000380)={'team0\x00', <r7=>0x0}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', <r8=>r4, 0x20, 0x1, 0x67, 0x1, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @empty, {[@ra={0x94, 0x4, 0x1}, @generic={0x82, 0xb, "2ca288a503ffbea924"}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', <r9=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000004c0)={'erspan0\x00', <r10=>r4, 0x7, 0x0, 0x8, 0x251, {{0x20, 0x4, 0x0, 0x3e, 0x80, 0x68, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@generic={0x86, 0xd, "bc3cacc0883a3568ec9360"}, @generic={0x94, 0x8, "5f72b15527d6"}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x97, [@multicast1]}, @generic={0x88, 0xc, "37d8b6ff4966c88efac4"}, @noop, @timestamp_addr={0x44, 0x2c, 0x35, 0x1, 0x4, [{@local, 0x8}, {@remote, 0x6}, {@multicast2, 0x400}, {@broadcast}, {@rand_addr=0x64010101, 0x400}]}, @lsrr={0x83, 0x7, 0x1b, [@empty]}, @lsrr={0x83, 0xb, 0x9b, [@loopback, @multicast2]}]}}}}})
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000980)={0x33c, r3, 0x20, 0x70bd28, 0xfffffff7, {}, [{{0x8, 0x1, r7}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x40000}, 0x8094)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@generic={0x81, 0x1, 0x0, 0x2, 0x9}, @call={0x85, 0x0, 0x0, 0x90}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xf}, @alu={0x7, 0x1, 0xc, 0x2, 0x8, 0x19, 0xfffffffffffffff0}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x2, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000080)='syzkaller\x00', 0x1ff, 0xca, &(0x7f00000000c0)=""/202, 0x0, 0x11, '\x00', r4, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x4, 0x6, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r5, r6]}, 0x80)

15:39:52 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000480)={0x0, 0x5, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x3, 0x0, &(0x7f0000000380)=[{}, {}, {0x0, <r2=>0x80000000}], 0x2, 0x0, &(0x7f0000000400)=[{}, {}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000580)={r2, &(0x7f0000000040), &(0x7f0000000500)})
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000005c0)="911a923181ed111399f6f85e26c0ff3b", 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000480)={0x0, 0x5, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x3, 0x0, &(0x7f0000000380)=[{}, {}, {}], 0x2, 0x0, &(0x7f0000000400)=[{}, {}]}) (async)
ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000580)={r2, &(0x7f0000000040), &(0x7f0000000500)}) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000005c0)="911a923181ed111399f6f85e26c0ff3b", 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)

15:39:52 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'gre0\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a746e6c31000000000000010000394d4467433aff76bf8db588e3670d85fb7386f66f3f6f0261b2b2fa04313c47bb5c9e1c59ebdca3ccdd1c70d3c31c7639e59e7345117c8ede4eb6d4356d35d2d2fc44792392cef8fd4dd08c89bc6224f9141fecab9fa6adc4c3aa4f4de34b589df6fbc9fe42a3770340fc1ab0bd79f9afa0d91bb78647f3fcd42c15b500000000000000000000000000000082f1af2d8317ec2a", @ANYRES32=<r4=>0x0, @ANYBLOB="7800004000000a6900000006411900440067000003049078ac141418000000008313ffffffffff64010101ac1e000100000000441c9b517f00000100000008ac1414bb000000060a0101020001000100"]})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0))
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000500)={'syztnl2\x00', <r5=>0x0, 0x1, 0x7, 0x2, 0x1ff, {{0x1b, 0x4, 0x3, 0x14, 0x6c, 0x65, 0x0, 0x0, 0x29, 0x0, @broadcast, @empty, {[@end, @end, @rr={0x7, 0xb, 0x94, [@empty, @multicast2]}, @noop, @timestamp_prespec={0x44, 0x2c, 0xd8, 0x3, 0x9, [{@local, 0x87}, {@loopback, 0xffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}, {@loopback, 0xfffff072}, {@empty, 0x6}]}, @noop, @timestamp={0x44, 0x1c, 0x81, 0x0, 0x6, [0x800, 0x1, 0x400, 0x5, 0x4000000, 0xffffffff]}]}}}}})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000680)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r8, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x4}}]}, 0x6c}}, 0x0)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000980)={0x580, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x9, 0xfe, 0x7}, {0x20, 0x4, 0x3, 0x6}, {0x3, 0x7f, 0xfb, 0x80000000}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb7e}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x580}, 0x1, 0x0, 0x0, 0x10}, 0x24)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r11, &(0x7f0000000940)={0x18}, 0x18)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x80)
write$RDMA_USER_CM_CMD_BIND_IP(r12, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @mcast2, 0x440}}}, 0x30)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r11, &(0x7f0000000080)={0x11, 0x10}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000180)={<r13=>0xffffffffffffffff}, 0x2}}, 0x20)
r14 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r14, &(0x7f0000000940)={0x18}, 0x18)
mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r14, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r16=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r15, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000200)=0x4, r13, 0x0, 0x0, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r11, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xfffffffc, @empty, 0x7f}, r16}}, 0x30)
write$RDMA_USER_CM_CMD_DESTROY_ID(r10, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r13}}, 0x18)

15:39:52 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40814}, 0x80)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))

15:39:52 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111, 0x1}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30) (async)

15:39:52 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4080)
write$P9_RREAD(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="d0000000750100c500000808a5b03183fc624bf7f49c240a9c2acbfb2d32da6af410909c43a8807d212846363a1a7999d53986e2bad40acf603b41467a706f73dc04f7bc8ab269d3ad8d5c9812b7323766121c1d261c29255a509beb6fa53ba239c888c6ac70e18fe891f0321de6ec64da0b76e3e1b22867d5ae7599d7e577a89cf8ed64a8d001c99931e865c0b958a450259fc138a9072ac509c2794490cf9b032c46333e1431c0316b3d33d9bdb862c3ae041d42107a93f0bcb24d6d6714f67a2bd44787b32bd811e063cd4c"], 0xd0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4011, r0, 0x0)

15:39:52 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000480)={0x0, 0x5, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{}], 0x3, 0x0, &(0x7f0000000380)=[{}, {}, {0x0, <r2=>0x80000000}], 0x2, 0x0, &(0x7f0000000400)=[{}, {}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000580)={r2, &(0x7f0000000040), &(0x7f0000000500)})
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000005c0)="911a923181ed111399f6f85e26c0ff3b", 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:52 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x31, @loopback, 0x800}}}, 0x30) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
write$P9_RATTACH(r0, &(0x7f00000000c0)={0x14, 0x69, 0x2, {0x1, 0x4, 0x1}}, 0x14) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffd20) (async)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x50, r1, 0xe486f000) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:52 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:52 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x4}}]}, 0x6c}}, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'gre0\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a746e6c31000000000000010000394d4467433aff76bf8db588e3670d85fb7386f66f3f6f0261b2b2fa04313c47bb5c9e1c59ebdca3ccdd1c70d3c31c7639e59e7345117c8ede4eb6d4356d35d2d2fc44792392cef8fd4dd08c89bc6224f9141fecab9fa6adc4c3aa4f4de34b589df6fbc9fe42a3770340fc1ab0bd79f9afa0d91bb78647f3fcd42c15b500000000000000000000000000000082f1af2d8317ec2a", @ANYRES32=<r4=>0x0, @ANYBLOB="7800004000000a6900000006411900440067000003049078ac141418000000008313ffffffffff64010101ac1e000100000000441c9b517f00000100000008ac1414bb000000060a0101020001000100"]}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000500)={'syztnl2\x00', <r5=>0x0, 0x1, 0x7, 0x2, 0x1ff, {{0x1b, 0x4, 0x3, 0x14, 0x6c, 0x65, 0x0, 0x0, 0x29, 0x0, @broadcast, @empty, {[@end, @end, @rr={0x7, 0xb, 0x94, [@empty, @multicast2]}, @noop, @timestamp_prespec={0x44, 0x2c, 0xd8, 0x3, 0x9, [{@local, 0x87}, {@loopback, 0xffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}, {@loopback, 0xfffff072}, {@empty, 0x6}]}, @noop, @timestamp={0x44, 0x1c, 0x81, 0x0, 0x6, [0x800, 0x1, 0x400, 0x5, 0x4000000, 0xffffffff]}]}}}}}) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000680)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r8, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x4}}]}, 0x6c}}, 0x0) (async, rerun: 64)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000980)={0x580, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x9, 0xfe, 0x7}, {0x20, 0x4, 0x3, 0x6}, {0x3, 0x7f, 0xfb, 0x80000000}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb7e}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x580}, 0x1, 0x0, 0x0, 0x10}, 0x24) (rerun: 64)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r11, &(0x7f0000000940)={0x18}, 0x18) (async)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x80)
write$RDMA_USER_CM_CMD_BIND_IP(r12, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @mcast2, 0x440}}}, 0x30) (async)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r11, &(0x7f0000000080)={0x11, 0x10}, 0x18) (async, rerun: 64)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000180)={<r13=>0xffffffffffffffff}, 0x2}}, 0x20) (async, rerun: 64)
r14 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r14, &(0x7f0000000940)={0x18}, 0x18)
mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r14, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async, rerun: 32)
r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 32)
write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r16=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r15, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000200)=0x4, r13, 0x0, 0x0, 0x1}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r11, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xfffffffc, @empty, 0x7f}, r16}}, 0x30) (async, rerun: 32)
write$RDMA_USER_CM_CMD_DESTROY_ID(r10, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r13}}, 0x18) (rerun: 32)

15:39:52 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4095)
getuid()
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00042abd700fe4dbdf2504000000"], 0x14}}, 0x8091)
getuid()
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)

15:39:52 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)
socket(0x2a, 0x1, 0x8)

15:39:52 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r1}}, 0x18)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:52 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'gre0\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a746e6c31000000000000010000394d4467433aff76bf8db588e3670d85fb7386f66f3f6f0261b2b2fa04313c47bb5c9e1c59ebdca3ccdd1c70d3c31c7639e59e7345117c8ede4eb6d4356d35d2d2fc44792392cef8fd4dd08c89bc6224f9141fecab9fa6adc4c3aa4f4de34b589df6fbc9fe42a3770340fc1ab0bd79f9afa0d91bb78647f3fcd42c15b500000000000000000000000000000082f1af2d8317ec2a", @ANYRES32=<r4=>0x0, @ANYBLOB="7800004000000a6900000006411900440067000003049078ac141418000000008313ffffffffff64010101ac1e000100000000441c9b517f00000100000008ac1414bb000000060a0101020001000100"]})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000500)={'syztnl2\x00', <r5=>0x0, 0x1, 0x7, 0x2, 0x1ff, {{0x1b, 0x4, 0x3, 0x14, 0x6c, 0x65, 0x0, 0x0, 0x29, 0x0, @broadcast, @empty, {[@end, @end, @rr={0x7, 0xb, 0x94, [@empty, @multicast2]}, @noop, @timestamp_prespec={0x44, 0x2c, 0xd8, 0x3, 0x9, [{@local, 0x87}, {@loopback, 0xffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}, {@loopback, 0xfffff072}, {@empty, 0x6}]}, @noop, @timestamp={0x44, 0x1c, 0x81, 0x0, 0x6, [0x800, 0x1, 0x400, 0x5, 0x4000000, 0xffffffff]}]}}}}}) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000680)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r8, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x4}}]}, 0x6c}}, 0x0)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000980)={0x580, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x9, 0xfe, 0x7}, {0x20, 0x4, 0x3, 0x6}, {0x3, 0x7f, 0xfb, 0x80000000}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb7e}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x580}, 0x1, 0x0, 0x0, 0x10}, 0x24)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r11, &(0x7f0000000940)={0x18}, 0x18)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x80)
write$RDMA_USER_CM_CMD_BIND_IP(r12, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @mcast2, 0x440}}}, 0x30)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r11, &(0x7f0000000080)={0x11, 0x10}, 0x18) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000180)={<r13=>0xffffffffffffffff}, 0x2}}, 0x20)
r14 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r14, &(0x7f0000000940)={0x18}, 0x18) (async)
mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r14, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r16=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r15, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000200)=0x4, r13, 0x0, 0x0, 0x1}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r11, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xfffffffc, @empty, 0x7f}, r16}}, 0x30)
write$RDMA_USER_CM_CMD_DESTROY_ID(r10, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r13}}, 0x18)

15:39:52 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) (async)
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4080)
write$P9_RREAD(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="d0000000750100c500000808a5b03183fc624bf7f49c240a9c2acbfb2d32da6af410909c43a8807d212846363a1a7999d53986e2bad40acf603b41467a706f73dc04f7bc8ab269d3ad8d5c9812b7323766121c1d261c29255a509beb6fa53ba239c888c6ac70e18fe891f0321de6ec64da0b76e3e1b22867d5ae7599d7e577a89cf8ed64a8d001c99931e865c0b958a450259fc138a9072ac509c2794490cf9b032c46333e1431c0316b3d33d9bdb862c3ae041d42107a93f0bcb24d6d6714f67a2bd44787b32bd811e063cd4c"], 0xd0) (async)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4011, r0, 0x0)

15:39:52 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x3, @private2, 0x8}, r3}}, 0x30)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:52 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4095)
getuid()
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00042abd700fe4dbdf2504000000"], 0x14}}, 0x8091)
getuid()
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4095) (async)
getuid() (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00042abd700fe4dbdf2504000000"], 0x14}}, 0x8091) (async)
getuid() (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) (async)

15:39:52 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r1}}, 0x18)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:52 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r1, r4}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, r5}}, 0x38)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:52 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)
socket(0x2a, 0x1, 0x8)

15:39:52 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4080)
write$P9_RREAD(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="d0000000750100c500000808a5b03183fc624bf7f49c240a9c2acbfb2d32da6af410909c43a8807d212846363a1a7999d53986e2bad40acf603b41467a706f73dc04f7bc8ab269d3ad8d5c9812b7323766121c1d261c29255a509beb6fa53ba239c888c6ac70e18fe891f0321de6ec64da0b76e3e1b22867d5ae7599d7e577a89cf8ed64a8d001c99931e865c0b958a450259fc138a9072ac509c2794490cf9b032c46333e1431c0316b3d33d9bdb862c3ae041d42107a93f0bcb24d6d6714f67a2bd44787b32bd811e063cd4c"], 0xd0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4011, r0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) (async)
pipe2$9p(&(0x7f0000000040), 0x4080) (async)
write$P9_RREAD(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="d0000000750100c500000808a5b03183fc624bf7f49c240a9c2acbfb2d32da6af410909c43a8807d212846363a1a7999d53986e2bad40acf603b41467a706f73dc04f7bc8ab269d3ad8d5c9812b7323766121c1d261c29255a509beb6fa53ba239c888c6ac70e18fe891f0321de6ec64da0b76e3e1b22867d5ae7599d7e577a89cf8ed64a8d001c99931e865c0b958a450259fc138a9072ac509c2794490cf9b032c46333e1431c0316b3d33d9bdb862c3ae041d42107a93f0bcb24d6d6714f67a2bd44787b32bd811e063cd4c"], 0xd0) (async)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4011, r0, 0x0) (async)

15:39:52 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4095) (async)
getuid() (async)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00042abd700fe4dbdf2504000000"], 0x14}}, 0x8091)
getuid()
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)

15:39:52 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r1}}, 0x18)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:52 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x6}, 0x4)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
read$watch_queue(r2, &(0x7f0000000040)=""/14, 0xe)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', <r3=>0x0, 0x1, 0x10, 0x1, 0x0, {{0xf, 0x4, 0x0, 0x3b, 0x3c, 0x68, 0x0, 0xe0, 0x2f, 0x0, @local, @empty, {[@noop, @timestamp_addr={0x44, 0x24, 0x46, 0x1, 0xa, [{@empty, 0x800}, {@rand_addr=0x64010102, 0x330c}, {@local, 0xff}, {@remote, 0x8000}]}]}}}}})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000680)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r6, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'tunl0\x00', <r8=>0x0, 0x7, 0x10, 0x4, 0x4, {{0xa, 0x4, 0x0, 0x3e, 0x28, 0x68, 0x0, 0xf2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x13, 0xeb, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote]}, @noop]}}}}})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000680)={'team0\x00', <r12=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r11, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x4}}]}, 0x6c}}, 0x0)
sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f00000002c0)={0x3dc, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x880}, 0x20000000)

15:39:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:52 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000000000000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x8080)
r3 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffc000/0x2000)=nil)
shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x6759}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}]}, 0x34}}, 0x40)

15:39:52 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x3, @private2, 0x8}, r3}}, 0x30)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x3, @private2, 0x8}, r3}}, 0x30) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)

15:39:52 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r1, r4}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, r5}}, 0x38)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r1, r4}}, 0x18) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x2}}, 0x20) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, r5}}, 0x38) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)

15:39:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:52 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30) (async, rerun: 32)
socket(0x2a, 0x1, 0x8) (rerun: 32)

15:39:52 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x6}, 0x4) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
read$watch_queue(r2, &(0x7f0000000040)=""/14, 0xe) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', <r3=>0x0, 0x1, 0x10, 0x1, 0x0, {{0xf, 0x4, 0x0, 0x3b, 0x3c, 0x68, 0x0, 0xe0, 0x2f, 0x0, @local, @empty, {[@noop, @timestamp_addr={0x44, 0x24, 0x46, 0x1, 0xa, [{@empty, 0x800}, {@rand_addr=0x64010102, 0x330c}, {@local, 0xff}, {@remote, 0x8000}]}]}}}}}) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000680)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r6, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x4}}]}, 0x6c}}, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'tunl0\x00', <r8=>0x0, 0x7, 0x10, 0x4, 0x4, {{0xa, 0x4, 0x0, 0x3e, 0x28, 0x68, 0x0, 0xf2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x13, 0xeb, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote]}, @noop]}}}}}) (async)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000680)={'team0\x00', <r12=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r11, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x4}}]}, 0x6c}}, 0x0)
sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f00000002c0)={0x3dc, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x880}, 0x20000000)

15:39:52 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000000000000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x8080) (async)
r3 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffc000/0x2000)=nil)
shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x6759}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}]}, 0x34}}, 0x40)

15:39:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0200da229ad7c38ea4fcafeb332de1d628ed6a0831bc5dfc331f6edd518db145a4dd19eace209c9f1319fa7bb055e915783bdc751c08674ddca7a2c9ad4a7c05d9b4ac946ee56b2708cc2eddd05c9a90ece3c8e97ba58c1d44985c625e38a16ca07fccdf63e58ee3d38457d3d2fcc33d0a8ce5b9ea704b6d730b4645a8bec129e4d8be6e0ace4e2edc3ef49b9c9bb60ed4261a3f0afcbf1b3e5672ce24022307803d3b5f4f3c0c35e69eaa6c4000924d5a2dfabc1007e8005853b72bb43fad17e79bb8652c5209ff434656394aff01efee0c609eb0823adb096cb70e184ef253e3ef1c6266b5ccca67920777777aa41e8e5b2a72c0bc6e3806fe8d81ece164def0fe058af165464defbfc213f342404b3daf6bf6deebd7fdf9af90cfa7e8490a19056b60b973f268dc035da8f8f6cf1d864b7b69ba441a1f8053ea92d3a84a06f09eb5b6ebe06b7f31c848fd5ac58534989679ca1c803278bd4493a98d79dbb274f742a1d249ad", @ANYRES16=r3, @ANYBLOB="010000000000000000000700000008000b0000000000"], 0x1c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80a00000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0xfffffef0, r3, 0xe26, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x1433}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_LEN={0xfffffffffffffce0, 0x6, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x40000)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c010}, 0x24000080)

15:39:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="010000000000000000000700000008000b0000000000"], 0x1c}}, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80a00000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0xfffffef0, r3, 0xe26, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x1433}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_LEN={0xfffffffffffffce0, 0x6, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x40000)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c010}, 0x24000080)

15:39:52 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x6}, 0x4) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
read$watch_queue(r2, &(0x7f0000000040)=""/14, 0xe) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', <r3=>0x0, 0x1, 0x10, 0x1, 0x0, {{0xf, 0x4, 0x0, 0x3b, 0x3c, 0x68, 0x0, 0xe0, 0x2f, 0x0, @local, @empty, {[@noop, @timestamp_addr={0x44, 0x24, 0x46, 0x1, 0xa, [{@empty, 0x800}, {@rand_addr=0x64010102, 0x330c}, {@local, 0xff}, {@remote, 0x8000}]}]}}}}}) (async, rerun: 32)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000680)={'team0\x00', <r7=>0x0}) (rerun: 64)
sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r6, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x4}}]}, 0x6c}}, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'tunl0\x00', <r8=>0x0, 0x7, 0x10, 0x4, 0x4, {{0xa, 0x4, 0x0, 0x3e, 0x28, 0x68, 0x0, 0xf2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x13, 0xeb, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote]}, @noop]}}}}})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000680)={'team0\x00', <r12=>0x0}) (rerun: 32)
sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r11, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x4}}]}, 0x6c}}, 0x0)
sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f00000002c0)={0x3dc, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x880}, 0x20000000)

15:39:52 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000000000000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x8080) (async, rerun: 64)
r3 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffc000/0x2000)=nil) (rerun: 64)
shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x6759}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}]}, 0x34}}, 0x40)

15:39:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="010000000000000000000700000008000b0000000000"], 0x1c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80a00000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0xfffffef0, r3, 0xe26, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x1433}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_LEN={0xfffffffffffffce0, 0x6, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x40000) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c010}, 0x24000080)

15:39:52 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async, rerun: 64)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 64)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x3, @private2, 0x8}, r3}}, 0x30) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:52 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r1, r4}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, r5}}, 0x38)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r1, r4}}, 0x18) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x2}}, 0x20) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, r5}}, 0x38) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)

15:39:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
write$P9_RREAD(r2, &(0x7f0000000040)={0x2b, 0x75, 0x1, {0x20, "fa9c3c893a7b1cd522ce4131d546ec5cfaa4c8b7594e93b777decda3f5fd94f8"}}, 0x2b)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:52 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000010010593096211302d771f9"], 0x1c}}, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001440)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/4096, 0x1000, 0x1, &(0x7f00000013c0)=""/71, 0x47}, &(0x7f0000001480)=0x40)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

15:39:53 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x9, 0xff, 0x1f, 0x0, 0x7fffffffffffffff, 0x4040, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x80040, 0x4, 0x451b, 0x1, 0x8001, 0x3f, 0x463, 0x0, 0x7, 0x0, 0x5}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xfffffffc, @mcast2}, r2}}, 0x30)

15:39:53 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000010010593096211302d771f9"], 0x1c}}, 0x0) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001440)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/4096, 0x1000, 0x1, &(0x7f00000013c0)=""/71, 0x47}, &(0x7f0000001480)=0x40) (async)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

15:39:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
write$P9_RREAD(r2, &(0x7f0000000040)={0x2b, 0x75, 0x1, {0x20, "fa9c3c893a7b1cd522ce4131d546ec5cfaa4c8b7594e93b777decda3f5fd94f8"}}, 0x2b) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:53 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\b\x00\x00', @ANYRES16=r1, @ANYBLOB="00032bbd7000fbdbdf250300000006001c000300000006001a004e220000050022000000000006001b004e21000008000c000300000006001d00400000000800110000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = socket(0x22, 0xa, 0x7fff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000b183e86749360acd7a00010000000000fba1ebdd653b47c516714b7b55e836724a4618d681fdb4406d2eeae153532d53989fc92cc41679beba44547a4a2e73ee1f9d57ed1764146990d953eba5f5adaaa957bf1fdc21c129627fa266", @ANYRES16=r1, @ANYBLOB="200025bd7000fbdbdf25020000001400080076657468305f766c616e00000000000008001800ac1e010105001200d3000000"], 0x38}, 0x1, 0x0, 0x0, 0x18a55e254c996ff6}, 0x4)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x3000000, 0x30, 0xffffffffffffffff, 0x83000000)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, 'veth0_vlan\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x58}}, 0x8080)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x12, 0xffffffffffffffff, 0xcb000)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f00000003c0), 0x2, {0xa, 0x4e21, 0x5, @loopback, 0x101}}}, 0x38)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc)

15:39:53 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18)
getsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {r5, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x4, 0x3, {"4fbe3bbac207d127f2cc721b57801a7f"}, 0x0, 0x9, 0x1800000000000000}, @in6={0xa, 0x4e20, 0x6, @local, 0x5}}}, 0x118)
setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "57330c37d5d7cf4d", "52c8698f240c21e90ee5202f03fb997a", "257090a7", "e0634d3fcf3a227f"}, 0x28)

15:39:53 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\b\x00\x00', @ANYRES16=r1, @ANYBLOB="00032bbd7000fbdbdf250300000006001c000300000006001a004e220000050022000000000006001b004e21000008000c000300000006001d00400000000800110000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = socket(0x22, 0xa, 0x7fff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000b183e86749360acd7a00010000000000fba1ebdd653b47c516714b7b55e836724a4618d681fdb4406d2eeae153532d53989fc92cc41679beba44547a4a2e73ee1f9d57ed1764146990d953eba5f5adaaa957bf1fdc21c129627fa266", @ANYRES16=r1, @ANYBLOB="200025bd7000fbdbdf25020000001400080076657468305f766c616e00000000000008001800ac1e010105001200d3000000"], 0x38}, 0x1, 0x0, 0x0, 0x18a55e254c996ff6}, 0x4)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x3000000, 0x30, 0xffffffffffffffff, 0x83000000)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, 'veth0_vlan\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x58}}, 0x8080)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x12, 0xffffffffffffffff, 0xcb000)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f00000003c0), 0x2, {0xa, 0x4e21, 0x5, @loopback, 0x101}}}, 0x38)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\b\x00\x00', @ANYRES16=r1, @ANYBLOB="00032bbd7000fbdbdf250300000006001c000300000006001a004e220000050022000000000006001b004e21000008000c000300000006001d00400000000800110000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
socket(0x22, 0xa, 0x7fff) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000b183e86749360acd7a00010000000000fba1ebdd653b47c516714b7b55e836724a4618d681fdb4406d2eeae153532d53989fc92cc41679beba44547a4a2e73ee1f9d57ed1764146990d953eba5f5adaaa957bf1fdc21c129627fa266", @ANYRES16=r1, @ANYBLOB="200025bd7000fbdbdf25020000001400080076657468305f766c616e00000000000008001800ac1e010105001200d3000000"], 0x38}, 0x1, 0x0, 0x0, 0x18a55e254c996ff6}, 0x4) (async)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x3000000, 0x30, 0xffffffffffffffff, 0x83000000) (async)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, 'veth0_vlan\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x58}}, 0x8080) (async)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x12, 0xffffffffffffffff, 0xcb000) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f00000003c0), 0x2, {0xa, 0x4e21, 0x5, @loopback, 0x101}}}, 0x38) (async)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) (async)

15:39:53 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\b\x00\x00', @ANYRES16=r1, @ANYBLOB="00032bbd7000fbdbdf250300000006001c000300000006001a004e220000050022000000000006001b004e21000008000c000300000006001d00400000000800110000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async, rerun: 64)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64)
r2 = socket(0x22, 0xa, 0x7fff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000b183e86749360acd7a00010000000000fba1ebdd653b47c516714b7b55e836724a4618d681fdb4406d2eeae153532d53989fc92cc41679beba44547a4a2e73ee1f9d57ed1764146990d953eba5f5adaaa957bf1fdc21c129627fa266", @ANYRES16=r1, @ANYBLOB="200025bd7000fbdbdf25020000001400080076657468305f766c616e00000000000008001800ac1e010105001200d3000000"], 0x38}, 0x1, 0x0, 0x0, 0x18a55e254c996ff6}, 0x4) (async)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x3000000, 0x30, 0xffffffffffffffff, 0x83000000)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, 'veth0_vlan\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x58}}, 0x8080) (async)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x12, 0xffffffffffffffff, 0xcb000) (async)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f00000003c0), 0x2, {0xa, 0x4e21, 0x5, @loopback, 0x101}}}, 0x38) (async)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc)

15:39:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
write$P9_RREAD(r2, &(0x7f0000000040)={0x2b, 0x75, 0x1, {0x20, "fa9c3c893a7b1cd522ce4131d546ec5cfaa4c8b7594e93b777decda3f5fd94f8"}}, 0x2b)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
write$P9_RREAD(r2, &(0x7f0000000040)={0x2b, 0x75, 0x1, {0x20, "fa9c3c893a7b1cd522ce4131d546ec5cfaa4c8b7594e93b777decda3f5fd94f8"}}, 0x2b) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) (async)

15:39:53 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x21, 0xfa00, {0x4, &(0x7f00000002c0)={<r2=>0xffffffffffffffff}, 0x13f, 0xa}}, 0x20)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{0xb, 0x0, [0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffc, 0x0, 0x0, 0x0, 0x3, 0x7f, 0x0, 0x1, 0x0, 0x9]}, {0x1, 0x0, [0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20000000]}], r2, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r2, 0x2}}, 0x18)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240)}}, 0x18)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/205, 0xcd, 0x1, &(0x7f0000000180)=""/28, 0x30}, &(0x7f00000004c0)=0x40)

15:39:53 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x9, 0xff, 0x1f, 0x0, 0x7fffffffffffffff, 0x4040, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x80040, 0x4, 0x451b, 0x1, 0x8001, 0x3f, 0x463, 0x0, 0x7, 0x0, 0x5}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xfffffffc, @mcast2}, r2}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x9, 0xff, 0x1f, 0x0, 0x7fffffffffffffff, 0x4040, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x80040, 0x4, 0x451b, 0x1, 0x8001, 0x3f, 0x463, 0x0, 0x7, 0x0, 0x5}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xb) (async)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xfffffffc, @mcast2}, r2}}, 0x30) (async)

15:39:53 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000010010593096211302d771f9"], 0x1c}}, 0x0) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001440)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/4096, 0x1000, 0x1, &(0x7f00000013c0)=""/71, 0x47}, &(0x7f0000001480)=0x40) (async)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

15:39:53 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
r1 = socket(0x25, 0x2, 0x23)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x30, r0, 0x9e1a0000)
ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x2, 0x4, 0x6, 0xfffe, 0x5})

15:39:53 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) (async)
getsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {r5, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x4, 0x3, {"4fbe3bbac207d127f2cc721b57801a7f"}, 0x0, 0x9, 0x1800000000000000}, @in6={0xa, 0x4e20, 0x6, @local, 0x5}}}, 0x118) (async, rerun: 32)
setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "57330c37d5d7cf4d", "52c8698f240c21e90ee5202f03fb997a", "257090a7", "e0634d3fcf3a227f"}, 0x28) (rerun: 32)

15:39:53 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x200, 0x4070bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffff00000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4044000)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:53 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
r1 = socket(0x25, 0x2, 0x23)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18) (async)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x30, r0, 0x9e1a0000) (async)
ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x2, 0x4, 0x6, 0xfffe, 0x5})

15:39:53 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x200, 0x4070bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffff00000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4044000) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:53 executing program 5:
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000100)=0x14)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x202041, 0x0)

15:39:53 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x200, 0x4070bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffff00000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4044000)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:53 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x9, 0xff, 0x1f, 0x0, 0x7fffffffffffffff, 0x4040, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x80040, 0x4, 0x451b, 0x1, 0x8001, 0x3f, 0x463, 0x0, 0x7, 0x0, 0x5}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xfffffffc, @mcast2}, r2}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x9, 0xff, 0x1f, 0x0, 0x7fffffffffffffff, 0x4040, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x80040, 0x4, 0x451b, 0x1, 0x8001, 0x3f, 0x463, 0x0, 0x7, 0x0, 0x5}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xb) (async)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xfffffffc, @mcast2}, r2}}, 0x30) (async)

15:39:53 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x18) (async, rerun: 64)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x111}}, 0x20) (async, rerun: 64)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async, rerun: 64)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) (rerun: 64)
getsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async, rerun: 32)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) (async)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {r5, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x4, 0x3, {"4fbe3bbac207d127f2cc721b57801a7f"}, 0x0, 0x9, 0x1800000000000000}, @in6={0xa, 0x4e20, 0x6, @local, 0x5}}}, 0x118) (async)
setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "57330c37d5d7cf4d", "52c8698f240c21e90ee5202f03fb997a", "257090a7", "e0634d3fcf3a227f"}, 0x28)

15:39:53 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x21, 0xfa00, {0x4, &(0x7f00000002c0)={<r2=>0xffffffffffffffff}, 0x13f, 0xa}}, 0x20)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{0xb, 0x0, [0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffc, 0x0, 0x0, 0x0, 0x3, 0x7f, 0x0, 0x1, 0x0, 0x9]}, {0x1, 0x0, [0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20000000]}], r2, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r2, 0x2}}, 0x18) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240)}}, 0x18) (async, rerun: 64)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/205, 0xcd, 0x1, &(0x7f0000000180)=""/28, 0x30}, &(0x7f00000004c0)=0x40) (rerun: 64)

15:39:53 executing program 5:
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000100)=0x14) (async)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x202041, 0x0)

15:39:53 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
r1 = socket(0x25, 0x2, 0x23)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (async)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18) (async)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x30, r0, 0x9e1a0000) (async)
ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x2, 0x4, 0x6, 0xfffe, 0x5})

15:39:53 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1)

15:39:53 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x27, 0xa, 0x40)
accept4$nfc_llcp(r0, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x800)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x4000001)

15:39:53 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1)

15:39:53 executing program 5:
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000100)=0x14)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x202041, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000100)=0x14) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) (async)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x202041, 0x0) (async)

15:39:53 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x27, 0xa, 0x40)
accept4$nfc_llcp(r0, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x800) (async, rerun: 64)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x4000001) (rerun: 64)

15:39:53 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async, rerun: 64)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x21, 0xfa00, {0x4, &(0x7f00000002c0)={<r2=>0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) (async, rerun: 64)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{0xb, 0x0, [0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffc, 0x0, 0x0, 0x0, 0x3, 0x7f, 0x0, 0x1, 0x0, 0x9]}, {0x1, 0x0, [0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20000000]}], r2, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r2, 0x2}}, 0x18) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240)}}, 0x18) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/205, 0xcd, 0x1, &(0x7f0000000180)=""/28, 0x30}, &(0x7f00000004c0)=0x40)

15:39:53 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r0 = socket(0x27, 0xa, 0x40) (rerun: 32)
accept4$nfc_llcp(r0, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x800) (async)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x4000001)

15:39:53 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
get_mempolicy(&(0x7f00000000c0), &(0x7f0000000040), 0xfffffffffffffe00, &(0x7f0000ff9000/0x4000)=nil, 0x7)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080))

15:39:53 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x111, 0x6}}, 0x20)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$P9_RMKNOD(r3, &(0x7f0000000100)={0x14, 0x13, 0x1, {0x20, 0x0, 0x7}}, 0x14)
pipe2$9p(&(0x7f0000000140), 0x80)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x2, 0x9}}, 0x20)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000940)={0x18}, 0x18)
ioctl$SG_SET_KEEP_ORPHAN(r5, 0x2287, &(0x7f0000000200)=0x8)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:53 executing program 4:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1)

15:39:53 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0xffffd000)

15:39:53 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:53 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
get_mempolicy(&(0x7f00000000c0), &(0x7f0000000040), 0xfffffffffffffe00, &(0x7f0000ff9000/0x4000)=nil, 0x7) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080))

15:39:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0xffffd000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0xffffd000) (async)

15:39:53 executing program 4:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000040))
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000080))
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:53 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x111, 0x6}}, 0x20) (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$P9_RMKNOD(r3, &(0x7f0000000100)={0x14, 0x13, 0x1, {0x20, 0x0, 0x7}}, 0x14)
pipe2$9p(&(0x7f0000000140), 0x80) (async)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x2, 0x9}}, 0x20) (async)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$SG_SET_KEEP_ORPHAN(r5, 0x2287, &(0x7f0000000200)=0x8) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)

15:39:53 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:53 executing program 4:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000040))
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000080))
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000040)) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000080)) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)

15:39:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0xffffd000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0xffffd000) (async)

15:39:53 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
get_mempolicy(&(0x7f00000000c0), &(0x7f0000000040), 0xfffffffffffffe00, &(0x7f0000ff9000/0x4000)=nil, 0x7)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080))

15:39:53 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:53 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0))
syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80800)
syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x400a01)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:53 executing program 4:
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000040))
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000080)) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:53 executing program 1:
ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000))
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30)

15:39:53 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x5c004}, 0xc0c1)
socketpair(0x0, 0x1, 0x8, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000680)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r5, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x4}}]}, 0x6c}}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000680)={'team0\x00', <r10=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r9, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r11=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', <r12=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r13=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', <r14=>0x0})
sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0c040000", @ANYRES16=r5, @ANYBLOB="00022cbd7000fbdbdf250000000008000100", @ANYRES32=r10, @ANYBLOB="404002677f617fdf6d803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000009080ec898769919afbe573d8ea349b40500030006000000040e04000800060089072857ff934d881e423c3f891bc4cdaea640e736a7188b901c1bc9e406dc28980dd048dc3a24b9ee49d4076c73de", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2002028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400e2ffffff38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040046fb0000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ff07000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff7f000008000600", @ANYRES32=0x0, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000900a2402000000053070101ff0f0000f7ffcd02810000000900051e2000000096ff08f8000001000000780508000000e103067f09000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="780002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ff00000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000002000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400cc0d000008000600", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000600000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=r14, @ANYBLOB], 0x40c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2)

15:39:53 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:53 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x111, 0x6}}, 0x20)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
write$P9_RMKNOD(r3, &(0x7f0000000100)={0x14, 0x13, 0x1, {0x20, 0x0, 0x7}}, 0x14)
pipe2$9p(&(0x7f0000000140), 0x80)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x2, 0x9}}, 0x20)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r5, &(0x7f0000000940)={0x18}, 0x18)
ioctl$SG_SET_KEEP_ORPHAN(r5, 0x2287, &(0x7f0000000200)=0x8)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111, 0x6}}, 0x20) (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async)
write$P9_RMKNOD(r3, &(0x7f0000000100)={0x14, 0x13, 0x1, {0x20, 0x0, 0x7}}, 0x14) (async)
pipe2$9p(&(0x7f0000000140), 0x80) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x2, 0x9}}, 0x20) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r5, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$SG_SET_KEEP_ORPHAN(r5, 0x2287, &(0x7f0000000200)=0x8) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) (async)

15:39:53 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x5)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c840000", @ANYRES16=0x0, @ANYBLOB="080025bd7000fcdbdf2503000000140020000000000000000000000000000000000108001900000000000c00160006000000000000000c0010000500000000000000080019000000000006001d00010400000c001600080000000000000008000b0000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x20000080)

15:39:53 executing program 1:
ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000))
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30)
ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000040)) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30) (async)

15:39:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)) (async)
syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80800)
syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x400a01)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:54 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x5c004}, 0xc0c1) (async)
socketpair(0x0, 0x1, 0x8, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000680)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r5, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x4}}]}, 0x6c}}, 0x0) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000680)={'team0\x00', <r10=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r9, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x4}}]}, 0x6c}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r11=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', <r12=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r13=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', <r14=>0x0})
sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0c040000", @ANYRES16=r5, @ANYBLOB="00022cbd7000fbdbdf250000000008000100", @ANYRES32=r10, @ANYBLOB="404002677f617fdf6d803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000009080ec898769919afbe573d8ea349b40500030006000000040e04000800060089072857ff934d881e423c3f891bc4cdaea640e736a7188b901c1bc9e406dc28980dd048dc3a24b9ee49d4076c73de", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2002028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400e2ffffff38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040046fb0000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ff07000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff7f000008000600", @ANYRES32=0x0, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000900a2402000000053070101ff0f0000f7ffcd02810000000900051e2000000096ff08f8000001000000780508000000e103067f09000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="780002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ff00000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000002000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400cc0d000008000600", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000600000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=r14, @ANYBLOB], 0x40c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2)

15:39:54 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
socket(0x2, 0x2, 0x3)
r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xb1, 0x7, 0x6, 0x3f, 0x0, 0xfffffffffffffff8, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x31, 0x31, 0xb91, 0x6, 0xffffffffffffffff, 0x20, 0x8000, 0x0, 0x3, 0x0, 0x6}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x7)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)) (async)
syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80800)
syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x400a01)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0)

15:39:54 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x5)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c840000", @ANYRES16=0x0, @ANYBLOB="080025bd7000fcdbdf2503000000140020000000000000000000000000000000000108001900000000000c00160006000000000000000c0010000500000000000000080019000000000006001d00010400000c001600080000000000000008000b0000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x20000080)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x5) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c840000", @ANYRES16=0x0, @ANYBLOB="080025bd7000fcdbdf2503000000140020000000000000000000000000000000000108001900000000000c00160006000000000000000c0010000500000000000000080019000000000006001d00010400000c001600080000000000000008000b0000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) (async)

15:39:54 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x5c004}, 0xc0c1)
socketpair(0x0, 0x1, 0x8, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000680)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r5, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x4}}]}, 0x6c}}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000680)={'team0\x00', <r10=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r9, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r11=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', <r12=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r13=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', <r14=>0x0})
sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0c040000", @ANYRES16=r5, @ANYBLOB="00022cbd7000fbdbdf250000000008000100", @ANYRES32=r10, @ANYBLOB="404002677f617fdf6d803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000009080ec898769919afbe573d8ea349b40500030006000000040e04000800060089072857ff934d881e423c3f891bc4cdaea640e736a7188b901c1bc9e406dc28980dd048dc3a24b9ee49d4076c73de", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2002028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400e2ffffff38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040046fb0000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ff07000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff7f000008000600", @ANYRES32=0x0, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000900a2402000000053070101ff0f0000f7ffcd02810000000900051e2000000096ff08f8000001000000780508000000e103067f09000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="780002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ff00000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000002000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400cc0d000008000600", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000600000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=r14, @ANYBLOB], 0x40c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x5c004}, 0xc0c1) (async)
socketpair(0x0, 0x1, 0x8, &(0x7f0000000000)) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000680)) (async)
sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r5, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x4}}]}, 0x6c}}, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000680)) (async)
sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r9, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x4}}]}, 0x6c}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)) (async)
sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0c040000", @ANYRES16=r5, @ANYBLOB="00022cbd7000fbdbdf250000000008000100", @ANYRES32=r10, @ANYBLOB="404002677f617fdf6d803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000009080ec898769919afbe573d8ea349b40500030006000000040e04000800060089072857ff934d881e423c3f891bc4cdaea640e736a7188b901c1bc9e406dc28980dd048dc3a24b9ee49d4076c73de", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2002028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400e2ffffff38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040046fb0000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ff07000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff7f000008000600", @ANYRES32=0x0, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000900a2402000000053070101ff0f0000f7ffcd02810000000900051e2000000096ff08f8000001000000780508000000e103067f09000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="780002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ff00000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000002000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400cc0d000008000600", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000600000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=r14, @ANYBLOB], 0x40c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2) (async)

15:39:54 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r3}}, 0x18)

15:39:54 executing program 1:
ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000))
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30)
ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000040)) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30) (async)

15:39:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/59, 0x3b, 0x0, &(0x7f0000000180)=""/79, 0x4f}, &(0x7f0000000240)=0x40)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4011, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

15:39:54 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x5) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c840000", @ANYRES16=0x0, @ANYBLOB="080025bd7000fcdbdf2503000000140020000000000000000000000000000000000108001900000000000c00160006000000000000000c0010000500000000000000080019000000000006001d00010400000c001600080000000000000008000b0000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x20000080)

15:39:54 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, r4, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x5, @mcast2, 0x4}}}, 0xa0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/59, 0x3b, 0x0, &(0x7f0000000180)=""/79, 0x4f}, &(0x7f0000000240)=0x40)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4011, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/59, 0x3b, 0x0, &(0x7f0000000180)=""/79, 0x4f}, &(0x7f0000000240)=0x40) (async)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4011, r0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)

15:39:54 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
socket(0x2, 0x2, 0x3)
r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xb1, 0x7, 0x6, 0x3f, 0x0, 0xfffffffffffffff8, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x31, 0x31, 0xb91, 0x6, 0xffffffffffffffff, 0x20, 0x8000, 0x0, 0x3, 0x0, 0x6}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x7)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
socket(0x2, 0x2, 0x3) (async)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xb1, 0x7, 0x6, 0x3f, 0x0, 0xfffffffffffffff8, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x31, 0x31, 0xb91, 0x6, 0xffffffffffffffff, 0x20, 0x8000, 0x0, 0x3, 0x0, 0x6}, 0x0, 0xe, 0xffffffffffffffff, 0xa) (async)
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x7) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)

15:39:54 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r3}}, 0x18)

15:39:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/59, 0x3b, 0x0, &(0x7f0000000180)=""/79, 0x4f}, &(0x7f0000000240)=0x40)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4011, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/59, 0x3b, 0x0, &(0x7f0000000180)=""/79, 0x4f}, &(0x7f0000000240)=0x40) (async)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4011, r0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)

15:39:54 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, r4, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x5, @mcast2, 0x4}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:54 executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/194, 0xc2, 0x1, &(0x7f0000000140)=""/195, 0xc3}, &(0x7f0000000280)=0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r1, 0x0)

15:39:54 executing program 4:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f00000006c0)={'syztnl1\x00', <r2=>0x0, 0x1, 0x7, 0xfffffffa, 0x6, {{0x30, 0x4, 0x3, 0x22, 0xc0, 0x64, 0x0, 0x9, 0x29, 0x0, @multicast2, @multicast1, {[@cipso={0x86, 0x21, 0x3, [{0x1, 0x12, "abc594b486a610f54f578a56cd19f804"}, {0x5, 0x4, "c245"}, {0x5, 0x5, "f8489e"}]}, @ssrr={0x89, 0x13, 0xe5, [@multicast2, @empty, @local, @remote]}, @cipso={0x86, 0x69, 0x3, [{0x6, 0xa, "d7488c259831bd22"}, {0x7, 0x5, "5db5f0"}, {0x1, 0xa, "52a4fb34e5d0c8be"}, {0x5, 0x12, "65944a2dd083c413076a2da6b4d78f3c"}, {0x0, 0x12, "cb31ea9be365399c954662c811e91c2d"}, {0x6, 0x8, "130f16462a42"}, {0x6, 0xe, "f4e9abc40e8820c771f70336"}, {0x1, 0x10, "2374c4aea73e46b82f82941cea5e"}]}, @generic={0x44, 0xd, "360f250884f86fc5d6cb0f"}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', <r5=>r3, 0x7, 0x7, 0x5, 0x20000, {{0x16, 0x4, 0x3, 0x5, 0x58, 0x65, 0x0, 0x4, 0x6, 0x0, @multicast2, @multicast2, {[@timestamp={0x44, 0x14, 0x1c, 0x0, 0x0, [0xfff, 0x2, 0x1000, 0x2]}, @noop, @rr={0x7, 0xb, 0xc8, [@remote, @local]}, @noop, @ssrr={0x89, 0x13, 0x2d, [@local, @remote, @multicast2, @local]}, @generic={0x44, 0x5, "2e1c64"}, @rr={0x7, 0x7, 0x58, [@broadcast]}, @end]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', <r6=>0x0})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000680)={'team0\x00', <r10=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r9, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x4}}]}, 0x6c}}, 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000680)={'team0\x00', <r14=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r12, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r13, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x4}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r15 = socket$inet_udp(0x2, 0x2, 0x0)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
r17 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000680)={'team0\x00', <r18=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r16, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="01000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=r18, @ANYBLOB="04000280"], 0x6c}}, 0x0)
r19 = socket$inet_udp(0x2, 0x2, 0x0)
r20 = socket$nl_generic(0x10, 0x3, 0x10)
r21 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r19, 0x8933, &(0x7f0000000680)={'team0\x00', <r22=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r20, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r21, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r22}, {0x4}}]}, 0x6c}}, 0x0)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x19c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x4}}, {{0x8, 0x1, r5}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r18}}}]}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x54}, 0x4000)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000c054}, 0x1)

15:39:54 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}, 0x101}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e21, 0x65, @remote, 0x8000}, @in6={0xa, 0x4e21, 0xfffffff7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in6={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}], 0x9c)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8001}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000080)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', <r3=>0x0})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000680)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r6, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x4}}]}, 0x6c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000300)={'syztnl1\x00', <r8=>0x0, 0x20, 0x40, 0x5, 0x9, {{0x15, 0x4, 0x2, 0x2, 0x54, 0x67, 0x0, 0xb6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1, {[@end, @timestamp={0x44, 0x2c, 0xc8, 0x0, 0x6, [0x101, 0x9, 0x4, 0xa1e6, 0x8, 0x1, 0x800, 0x1, 0x6, 0xff]}, @lsrr={0x83, 0x13, 0xe, [@private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x39}, @multicast2]}]}}}}})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000680)={'team0\x00', <r12=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r11, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x4}}]}, 0x6c}}, 0x0)
r13 = socket$inet_udp(0x2, 0x2, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000680)={'team0\x00', <r16=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r14, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r15, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x4}}]}, 0x6c}}, 0x0)
r17 = socket$inet_udp(0x2, 0x2, 0x0)
r18 = socket$nl_generic(0x10, 0x3, 0x10)
r19 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r17, 0x8933, &(0x7f0000000680)={'team0\x00', <r20=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r18, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r19, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x4}}]}, 0x6c}}, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x2ec, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfab6}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r20}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x2ec}}, 0x40)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:54 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r3}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x6}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r3}}, 0x18) (async)

15:39:54 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
socket(0x2, 0x2, 0x3) (async)
r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xb1, 0x7, 0x6, 0x3f, 0x0, 0xfffffffffffffff8, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x31, 0x31, 0xb91, 0x6, 0xffffffffffffffff, 0x20, 0x8000, 0x0, 0x3, 0x0, 0x6}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x7)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:54 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, r4, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x5, @mcast2, 0x4}}}, 0xa0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)

15:39:54 executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/194, 0xc2, 0x1, &(0x7f0000000140)=""/195, 0xc3}, &(0x7f0000000280)=0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r1, 0x0)

15:39:54 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}, 0x101}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e21, 0x65, @remote, 0x8000}, @in6={0xa, 0x4e21, 0xfffffff7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in6={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}], 0x9c) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8001}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', <r3=>0x0})
r4 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000680)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r6, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x4}}]}, 0x6c}}, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000300)={'syztnl1\x00', <r8=>0x0, 0x20, 0x40, 0x5, 0x9, {{0x15, 0x4, 0x2, 0x2, 0x54, 0x67, 0x0, 0xb6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1, {[@end, @timestamp={0x44, 0x2c, 0xc8, 0x0, 0x6, [0x101, 0x9, 0x4, 0xa1e6, 0x8, 0x1, 0x800, 0x1, 0x6, 0xff]}, @lsrr={0x83, 0x13, 0xe, [@private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x39}, @multicast2]}]}}}}})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000680)={'team0\x00', <r12=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r11, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x4}}]}, 0x6c}}, 0x0)
r13 = socket$inet_udp(0x2, 0x2, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r15 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000680)={'team0\x00', <r16=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r14, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r15, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x4}}]}, 0x6c}}, 0x0) (async)
r17 = socket$inet_udp(0x2, 0x2, 0x0)
r18 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r19 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r17, 0x8933, &(0x7f0000000680)={'team0\x00', <r20=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r18, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r19, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x4}}]}, 0x6c}}, 0x0) (async)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x2ec, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfab6}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r20}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x2ec}}, 0x40)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:54 executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/194, 0xc2, 0x1, &(0x7f0000000140)=""/195, 0xc3}, &(0x7f0000000280)=0x40) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r1, 0x0)

[  743.621663] nla_parse: 58 callbacks suppressed
[  743.621669] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'.
15:39:54 executing program 4:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f00000006c0)={'syztnl1\x00', <r2=>0x0, 0x1, 0x7, 0xfffffffa, 0x6, {{0x30, 0x4, 0x3, 0x22, 0xc0, 0x64, 0x0, 0x9, 0x29, 0x0, @multicast2, @multicast1, {[@cipso={0x86, 0x21, 0x3, [{0x1, 0x12, "abc594b486a610f54f578a56cd19f804"}, {0x5, 0x4, "c245"}, {0x5, 0x5, "f8489e"}]}, @ssrr={0x89, 0x13, 0xe5, [@multicast2, @empty, @local, @remote]}, @cipso={0x86, 0x69, 0x3, [{0x6, 0xa, "d7488c259831bd22"}, {0x7, 0x5, "5db5f0"}, {0x1, 0xa, "52a4fb34e5d0c8be"}, {0x5, 0x12, "65944a2dd083c413076a2da6b4d78f3c"}, {0x0, 0x12, "cb31ea9be365399c954662c811e91c2d"}, {0x6, 0x8, "130f16462a42"}, {0x6, 0xe, "f4e9abc40e8820c771f70336"}, {0x1, 0x10, "2374c4aea73e46b82f82941cea5e"}]}, @generic={0x44, 0xd, "360f250884f86fc5d6cb0f"}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', <r4=>0x0}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', <r5=>r3, 0x7, 0x7, 0x5, 0x20000, {{0x16, 0x4, 0x3, 0x5, 0x58, 0x65, 0x0, 0x4, 0x6, 0x0, @multicast2, @multicast2, {[@timestamp={0x44, 0x14, 0x1c, 0x0, 0x0, [0xfff, 0x2, 0x1000, 0x2]}, @noop, @rr={0x7, 0xb, 0xc8, [@remote, @local]}, @noop, @ssrr={0x89, 0x13, 0x2d, [@local, @remote, @multicast2, @local]}, @generic={0x44, 0x5, "2e1c64"}, @rr={0x7, 0x7, 0x58, [@broadcast]}, @end]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', <r6=>0x0})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000680)={'team0\x00', <r10=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r9, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x4}}]}, 0x6c}}, 0x0) (async, rerun: 64)
r11 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000680)={'team0\x00', <r14=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r12, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r13, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x4}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
r15 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r16 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r17 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000680)={'team0\x00', <r18=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r16, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="01000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=r18, @ANYBLOB="04000280"], 0x6c}}, 0x0) (async, rerun: 64)
r19 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64)
r20 = socket$nl_generic(0x10, 0x3, 0x10)
r21 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r19, 0x8933, &(0x7f0000000680)={'team0\x00', <r22=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r20, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r21, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r22}, {0x4}}]}, 0x6c}}, 0x0) (async)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x19c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x4}}, {{0x8, 0x1, r5}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r18}}}]}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x54}, 0x4000)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000c054}, 0x1)

15:39:54 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}, 0x101}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e21, 0x65, @remote, 0x8000}, @in6={0xa, 0x4e21, 0xfffffff7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in6={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}], 0x9c) (async)
write$P9_ROPEN(r1, &(0x7f0000000940)={0x18}, 0x18) (async)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8001}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', <r3=>0x0})
r4 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000680)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r6, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x4}}]}, 0x6c}}, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000300)={'syztnl1\x00', <r8=>0x0, 0x20, 0x40, 0x5, 0x9, {{0x15, 0x4, 0x2, 0x2, 0x54, 0x67, 0x0, 0xb6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1, {[@end, @timestamp={0x44, 0x2c, 0xc8, 0x0, 0x6, [0x101, 0x9, 0x4, 0xa1e6, 0x8, 0x1, 0x800, 0x1, 0x6, 0xff]}, @lsrr={0x83, 0x13, 0xe, [@private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x39}, @multicast2]}]}}}}})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000680)={'team0\x00', <r12=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r11, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x4}}]}, 0x6c}}, 0x0)
r13 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r14 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r15 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000680)={'team0\x00', <r16=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r14, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r15, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x4}}]}, 0x6c}}, 0x0)
r17 = socket$inet_udp(0x2, 0x2, 0x0)
r18 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r19 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r17, 0x8933, &(0x7f0000000680)={'team0\x00', <r20=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r18, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r19, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x4}}]}, 0x6c}}, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x2ec, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfab6}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r20}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x2ec}}, 0x40) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:54 executing program 3:
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x9, 0x12)
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={<r5=>0xffffffffffffffff}, 0x106, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000540)={0x16, 0x98, 0xfa00, {&(0x7f0000000480), 0x4, r5, 0x10, 0x0, @in6={0xa, 0x6, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1ff}}}, 0xa0)
socketpair(0x8, 0x2, 0x3174, &(0x7f0000000180)={<r6=>0xffffffffffffffff})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r9=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x200]}], r9, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x80, @local, 0x2}, r9}}, 0x30)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010000000000000000000704ff0008000b0000000000"], 0x1c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r10, 0x10, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000020)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020025bd7000fddbdf250800000014002000ff010000000000000000000000000001060002000000000006001b004f21000608000c000200000006001c00807f000005000d00010000000c000f0002000000000000000500070002000000"], 0x64}}, 0x44)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r1, 0x0)

15:39:54 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, 0x4000})
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1, 0xfffffffc, @private2, 0x7a}, r1}}, 0x30)

15:39:54 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x10, &(0x7f0000000180), 0x106, 0x4}}, 0x5)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r1, r0}}, 0x18)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:54 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf25020000000c00080003000000000000000c000800080000000000000008000100000000928c15a74e9bc3a90008000100000000000c00080005000000000000000c0008000300000000000000"], 0x54}}, 0x40044001)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
pipe2$watch_queue(&(0x7f0000000700)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000780)={0x11, 0x10, 0xfa00, {&(0x7f0000000740)}}, 0x18)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x3, r1, 0x0, 0x1, @ib={0x1b, 0x4, 0x0, {"0cc35829eeb7df7705af884b33ab9d37"}, 0x2, 0xb6, 0x6}}}, 0xa0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81]}], r5, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x3, {0xa, 0x4e21, 0x40, @remote, 0x80}, r5}}, 0x38)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0)
pipe2$watch_queue(&(0x7f0000000640)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000680), 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000580)={0x16, 0x98, 0xfa00, {&(0x7f0000000540), 0x3, r5, 0x1c, 0x1, @ib={0x1b, 0xa69d, 0xffff, {"cbb97ab394954c1d62bfb87897c2998e"}, 0x0, 0xfffffffffffffffa, 0x8d2e}}}, 0xa0)

15:39:54 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, 0x4000})
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1, 0xfffffffc, @private2, 0x7a}, r1}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, 0x4000}) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1, 0xfffffffc, @private2, 0x7a}, r1}}, 0x30) (async)

15:39:54 executing program 5:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:54 executing program 3:
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x9, 0x12) (async)
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) (async)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={<r5=>0xffffffffffffffff}, 0x106, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000540)={0x16, 0x98, 0xfa00, {&(0x7f0000000480), 0x4, r5, 0x10, 0x0, @in6={0xa, 0x6, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1ff}}}, 0xa0)
socketpair(0x8, 0x2, 0x3174, &(0x7f0000000180)={<r6=>0xffffffffffffffff}) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r9=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x200]}], r9, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x80, @local, 0x2}, r9}}, 0x30) (async)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010000000000000000000704ff0008000b0000000000"], 0x1c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r10, 0x10, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000020) (async)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020025bd7000fddbdf250800000014002000ff010000000000000000000000000001060002000000000006001b004f21000608000c000200000006001c00807f000005000d00010000000c000f0002000000000000000500070002000000"], 0x64}}, 0x44)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r1, 0x0)

[  743.794136] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'.
15:39:54 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x10, &(0x7f0000000180), 0x106, 0x4}}, 0x5)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r1, r0}}, 0x18)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x10, &(0x7f0000000180), 0x106, 0x4}}, 0x5) (async)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r1, r0}}, 0x18) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)

15:39:54 executing program 5:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

15:39:54 executing program 4:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f00000006c0)={'syztnl1\x00', <r2=>0x0, 0x1, 0x7, 0xfffffffa, 0x6, {{0x30, 0x4, 0x3, 0x22, 0xc0, 0x64, 0x0, 0x9, 0x29, 0x0, @multicast2, @multicast1, {[@cipso={0x86, 0x21, 0x3, [{0x1, 0x12, "abc594b486a610f54f578a56cd19f804"}, {0x5, 0x4, "c245"}, {0x5, 0x5, "f8489e"}]}, @ssrr={0x89, 0x13, 0xe5, [@multicast2, @empty, @local, @remote]}, @cipso={0x86, 0x69, 0x3, [{0x6, 0xa, "d7488c259831bd22"}, {0x7, 0x5, "5db5f0"}, {0x1, 0xa, "52a4fb34e5d0c8be"}, {0x5, 0x12, "65944a2dd083c413076a2da6b4d78f3c"}, {0x0, 0x12, "cb31ea9be365399c954662c811e91c2d"}, {0x6, 0x8, "130f16462a42"}, {0x6, 0xe, "f4e9abc40e8820c771f70336"}, {0x1, 0x10, "2374c4aea73e46b82f82941cea5e"}]}, @generic={0x44, 0xd, "360f250884f86fc5d6cb0f"}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', <r5=>r3, 0x7, 0x7, 0x5, 0x20000, {{0x16, 0x4, 0x3, 0x5, 0x58, 0x65, 0x0, 0x4, 0x6, 0x0, @multicast2, @multicast2, {[@timestamp={0x44, 0x14, 0x1c, 0x0, 0x0, [0xfff, 0x2, 0x1000, 0x2]}, @noop, @rr={0x7, 0xb, 0xc8, [@remote, @local]}, @noop, @ssrr={0x89, 0x13, 0x2d, [@local, @remote, @multicast2, @local]}, @generic={0x44, 0x5, "2e1c64"}, @rr={0x7, 0x7, 0x58, [@broadcast]}, @end]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', <r6=>0x0})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r9 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000680)={'team0\x00', <r10=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r9, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x4}}]}, 0x6c}}, 0x0) (async, rerun: 32)
r11 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
r12 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000680)={'team0\x00', <r14=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r12, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r13, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x4}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
r15 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r16 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r17 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000680)={'team0\x00', <r18=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r16, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="01000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=r18, @ANYBLOB="04000280"], 0x6c}}, 0x0)
r19 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r20 = socket$nl_generic(0x10, 0x3, 0x10)
r21 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r19, 0x8933, &(0x7f0000000680)={'team0\x00', <r22=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r20, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000dc0)={0x6c, r21, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r22}, {0x4}}]}, 0x6c}}, 0x0) (async)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x19c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x4}}, {{0x8, 0x1, r5}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r18}}}]}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x54}, 0x4000) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000c054}, 0x1)

15:39:54 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, 0x4000})
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1, 0xfffffffc, @private2, 0x7a}, r1}}, 0x30)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x111}}, 0x20) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, 0x4000}) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1, 0xfffffffc, @private2, 0x7a}, r1}}, 0x30) (async)

15:39:54 executing program 5:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)

15:39:54 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf25020000000c00080003000000000000000c000800080000000000000008000100000000928c15a74e9bc3a90008000100000000000c00080005000000000000000c0008000300000000000000"], 0x54}}, 0x40044001) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
pipe2$watch_queue(&(0x7f0000000700)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000780)={0x11, 0x10, 0xfa00, {&(0x7f0000000740)}}, 0x18) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x3, r1, 0x0, 0x1, @ib={0x1b, 0x4, 0x0, {"0cc35829eeb7df7705af884b33ab9d37"}, 0x2, 0xb6, 0x6}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81]}], r5, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x3, {0xa, 0x4e21, 0x40, @remote, 0x80}, r5}}, 0x38) (async)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000640)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000680), 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000580)={0x16, 0x98, 0xfa00, {&(0x7f0000000540), 0x3, r5, 0x1c, 0x1, @ib={0x1b, 0xa69d, 0xffff, {"cbb97ab394954c1d62bfb87897c2998e"}, 0x0, 0xfffffffffffffffa, 0x8d2e}}}, 0xa0)

15:39:54 executing program 3:
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x9, 0x12) (async, rerun: 32)
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) (rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={<r5=>0xffffffffffffffff}, 0x106, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000540)={0x16, 0x98, 0xfa00, {&(0x7f0000000480), 0x4, r5, 0x10, 0x0, @in6={0xa, 0x6, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1ff}}}, 0xa0) (async)
socketpair(0x8, 0x2, 0x3174, &(0x7f0000000180)={<r6=>0xffffffffffffffff}) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r9=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x200]}], r9, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x80, @local, 0x2}, r9}}, 0x30) (async, rerun: 32)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 32)
sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010000000000000000000704ff0008000b0000000000"], 0x1c}}, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r10, 0x10, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000020) (async)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020025bd7000fddbdf250800000014002000ff010000000000000000000000000001060002000000000006001b004f21000608000c000200000006001c00807f000005000d00010000000c000f0002000000000000000500070002000000"], 0x64}}, 0x44)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4011, r1, 0x0)

15:39:54 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x90)

15:39:54 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x90)

15:39:54 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x4, {0xa, 0x4e20, 0x1, @private1, 0x2}, r1}}, 0x38)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x8}}, 0x10)

[  743.955251] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'.
15:39:54 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x90)

15:39:54 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, 0x4000})
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1, 0xfffffffc, @private2, 0x7a}, r1}}, 0x30)

15:39:54 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x10, &(0x7f0000000180), 0x106, 0x4}}, 0x5)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r1, r0}}, 0x18) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)

15:39:54 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x3ff, 0x50e02)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6000001, 0x20010, r0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '])\\^x\x97.'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x300400a1)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, r4, 0x14d86000)

[  744.171711] 
[  744.173358] =====================================
[  744.178180] WARNING: bad unlock balance detected!
[  744.183011] 4.14.302-syzkaller #0 Not tainted
[  744.187492] -------------------------------------
[  744.192320] syz-executor.0/15131 is trying to release lock (&file->mut) at:
[  744.199419] [<ffffffff8552920b>] ucma_destroy_id+0x1eb/0x420
[  744.205194] but there are no more locks to release!
[  744.210190] 
[  744.210190] other info that might help us debug this:
[  744.216837] 1 lock held by syz-executor.0/15131:
[  744.221574]  #0:  (&file->mut){+.+.}, at: [<ffffffff855291ac>] ucma_destroy_id+0x18c/0x420
[  744.229977] 
[  744.229977] stack backtrace:
[  744.234459] CPU: 0 PID: 15131 Comm: syz-executor.0 Not tainted 4.14.302-syzkaller #0
[  744.242438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[  744.251782] Call Trace:
[  744.254358]  dump_stack+0x1b2/0x281
[  744.257980]  ? ucma_destroy_id+0x1eb/0x420
[  744.262206]  lock_release.cold+0x70/0xbf
[  744.266379]  ? lock_downgrade+0x740/0x740
[  744.270520]  ? __ww_mutex_wakeup_for_backoff+0x210/0x210
[  744.275962]  __mutex_unlock_slowpath+0x75/0x770
[  744.280623]  ? radix_tree_lookup+0x20/0x20
[  744.284846]  ? __radix_tree_lookup+0x1b5/0x2e0
[  744.289557]  ? wait_for_completion_io+0x10/0x10
[  744.294220]  ucma_destroy_id+0x1eb/0x420
[  744.298273]  ? ucma_join_ip_multicast+0x180/0x180
[  744.303107]  ? __might_fault+0x177/0x1b0
[  744.307167]  ? _copy_from_user+0x96/0x100
[  744.311395]  ? ucma_join_ip_multicast+0x180/0x180
[  744.316234]  ucma_write+0x206/0x2c0
[  744.319846]  ? ucma_set_ib_path+0x510/0x510
[  744.324156]  __vfs_write+0xe4/0x630
[  744.327769]  ? ucma_set_ib_path+0x510/0x510
[  744.332075]  ? debug_check_no_obj_freed+0x2c0/0x680
[  744.337076]  ? kernel_read+0x110/0x110
[  744.340952]  ? common_file_perm+0x3ee/0x580
[  744.345264]  ? security_file_permission+0x82/0x1e0
[  744.350183]  ? rw_verify_area+0xe1/0x2a0
[  744.354231]  vfs_write+0x17f/0x4d0
[  744.357759]  SyS_write+0xf2/0x210
[  744.361200]  ? SyS_read+0x210/0x210
[  744.364816]  ? do_syscall_64+0x4c/0x640
[  744.368776]  ? SyS_read+0x210/0x210
[  744.372390]  do_syscall_64+0x1d5/0x640
[  744.376288]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
[  744.381465] RIP: 0033:0x7f104e6c50d9
[  744.385161] RSP: 002b:00007f104cc16168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  744.392857] RAX: ffffffffffffffda RBX: 00007f104e7e5050 RCX: 00007f104e6c50d9
[  744.400120] RDX: 0000000000000018 RSI: 0000000020000280 RDI: 0000000000000003
[  744.407380] RBP: 00007f104e720ae9 R08: 0000000000000000 R09: 0000000000000000
[  744.414636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
15:39:55 executing program 4:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xe5, 0x9, 0x8000, "ae8eb3396881b5a9937b41531e4f226e317952085258e0caa9845d45186d1dd697400ca3eef553e5c97ad639bc484b71949133c92f222c0e5e33e5b45ace256995b9b9ae2c247cd5910af365cafacebd19344f8cf3460c6af48495558c29659a492ca80a606ce869ddf51c6253a7d921532139886041b9d40965b859b1cf9e619d470abce7a0a1fd3b0b23c049b0a3744460894fdd9bec78cf101ee5ae00e558022b2060fe1590e1ae575560162ad30c1ebbd35318e79f82db703b6346415b94230b13c820212e59b1a646d687d3cdffb4926d56a51e2f64a1de6e14dea2fcba97176683f0"})
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

15:39:55 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30) (async)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x4, {0xa, 0x4e20, 0x1, @private1, 0x2}, r1}}, 0x38) (async)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x8}}, 0x10)

15:39:55 executing program 2:
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf25020000000c00080003000000000000000c000800080000000000000008000100000000928c15a74e9bc3a90008000100000000000c00080005000000000000000c0008000300000000000000"], 0x54}}, 0x40044001)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
pipe2$watch_queue(&(0x7f0000000700)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000780)={0x11, 0x10, 0xfa00, {&(0x7f0000000740)}}, 0x18)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x3, r1, 0x0, 0x1, @ib={0x1b, 0x4, 0x0, {"0cc35829eeb7df7705af884b33ab9d37"}, 0x2, 0xb6, 0x6}}}, 0xa0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81]}], r5, 0x1, 0x1, 0x90}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x3, {0xa, 0x4e21, 0x40, @remote, 0x80}, r5}}, 0x38)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0)
pipe2$watch_queue(&(0x7f0000000640)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000680), 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000580)={0x16, 0x98, 0xfa00, {&(0x7f0000000540), 0x3, r5, 0x1c, 0x1, @ib={0x1b, 0xa69d, 0xffff, {"cbb97ab394954c1d62bfb87897c2998e"}, 0x0, 0xfffffffffffffffa, 0x8d2e}}}, 0xa0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf25020000000c00080003000000000000000c000800080000000000000008000100000000928c15a74e9bc3a90008000100000000000c00080005000000000000000c0008000300000000000000"], 0x54}}, 0x40044001) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
pipe2$watch_queue(&(0x7f0000000700), 0x80) (async)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000780)={0x11, 0x10, 0xfa00, {&(0x7f0000000740)}}, 0x18) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x3, r1, 0x0, 0x1, @ib={0x1b, 0x4, 0x0, {"0cc35829eeb7df7705af884b33ab9d37"}, 0x2, 0xb6, 0x6}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81]}], r5, 0x1, 0x1, 0x90}}, 0x20) (async)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x3, {0xa, 0x4e21, 0x40, @remote, 0x80}, r5}}, 0x38) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000640), 0x80) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000680), 0x111, 0x2}}, 0x20) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000580)={0x16, 0x98, 0xfa00, {&(0x7f0000000540), 0x3, r5, 0x1c, 0x1, @ib={0x1b, 0xa69d, 0xffff, {"cbb97ab394954c1d62bfb87897c2998e"}, 0x0, 0xfffffffffffffffa, 0x8d2e}}}, 0xa0) (async)

15:39:55 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x3ff, 0x50e02)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6000001, 0x20010, r0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '])\\^x\x97.'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x300400a1)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, r4, 0x14d86000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x3ff, 0x50e02) (async)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6000001, 0x20010, r0, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '])\\^x\x97.'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x300400a1) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18) (async)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, r4, 0x14d86000) (async)

15:39:55 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, 0x4000})
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1, 0xfffffffc, @private2, 0x7a}, r1}}, 0x30)

15:39:55 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x3ff, 0x50e02)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6000001, 0x20010, r0, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18) (async)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r3, &(0x7f0000000940)={0x18}, 0x18) (async)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '])\\^x\x97.'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x300400a1) (async)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000940)={0x18}, 0x18)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, r4, 0x14d86000)

15:39:55 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r2, &(0x7f0000000940)={0x18}, 0x18)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, 0x4000})
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1, 0xfffffffc, @private2, 0x7a}, r1}}, 0x30)

15:39:55 executing program 4:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18) (async)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xe5, 0x9, 0x8000, "ae8eb3396881b5a9937b41531e4f226e317952085258e0caa9845d45186d1dd697400ca3eef553e5c97ad639bc484b71949133c92f222c0e5e33e5b45ace256995b9b9ae2c247cd5910af365cafacebd19344f8cf3460c6af48495558c29659a492ca80a606ce869ddf51c6253a7d921532139886041b9d40965b859b1cf9e619d470abce7a0a1fd3b0b23c049b0a3744460894fdd9bec78cf101ee5ae00e558022b2060fe1590e1ae575560162ad30c1ebbd35318e79f82db703b6346415b94230b13c820212e59b1a646d687d3cdffb4926d56a51e2f64a1de6e14dea2fcba97176683f0"})
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)

[  744.421895] R13: 00007ffc401efaff R14: 00007f104cc16300 R15: 0000000000022000
15:39:55 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30) (async)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x4, {0xa, 0x4e20, 0x1, @private1, 0x2}, r1}}, 0x38)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x8}}, 0x10)

15:39:55 executing program 4:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
write$P9_ROPEN(r0, &(0x7f0000000940)={0x18}, 0x18)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xe5, 0x9, 0x8000, "ae8eb3396881b5a9937b41531e4f226e317952085258e0caa9845d45186d1dd697400ca3eef553e5c97ad639bc484b71949133c92f222c0e5e33e5b45ace256995b9b9ae2c247cd5910af365cafacebd19344f8cf3460c6af48495558c29659a492ca80a606ce869ddf51c6253a7d921532139886041b9d40965b859b1cf9e619d470abce7a0a1fd3b0b23c049b0a3744460894fdd9bec78cf101ee5ae00e558022b2060fe1590e1ae575560162ad30c1ebbd35318e79f82db703b6346415b94230b13c820212e59b1a646d687d3cdffb4926d56a51e2f64a1de6e14dea2fcba97176683f0"})
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000000)={0x0}}, 0x1)