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"}) (async, rerun: 64) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x20}, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f00000009c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x6d2983ec81fd2641}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x6, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x240000d1}, 0x0) (async, rerun: 32) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xc98dcb9701520ad5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x4c111) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) 19:18:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r4}}, 0x18) (async) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r4, 0x0, "1aa4eb", "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"}}, 0x110) (async, rerun: 32) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x400000, 0x0) (async, rerun: 32) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r7}}, 0x18) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000600)={0xa, 0x4, 0xfa00, {r7}}, 0xc) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_REJECT(r8, &(0x7f0000000700)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x9, "a018ed", "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"}}, 0x110) (async, rerun: 32) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000580)={0x5, 0x10, 0xfa00, {&(0x7f0000000380), r10, 0x1}}, 0x18) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 890.046435] misc userio: No port type given on /dev/userio [ 890.056593] misc userio: No port type given on /dev/userio 19:18:56 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x2}, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x2}, 0x2) (async) 19:18:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r1, &(0x7f0000000000)=""/169, 0xa9, 0x20, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000800) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:18:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0xfffc, 0x4, 0xff, 0x8000, 0x8}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000380)=""/210, &(0x7f0000000480)=0xd2) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000280)=""/114, &(0x7f0000000300)=0x72) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0xff, 0x1, 0x0, 0x0, 0x1}, r3}}, 0x128) 19:18:56 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0xfffffffe, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:18:56 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)={0x0, 0x34, "147ff443c9505f0b931f30b4d12f760ef9ea2f24959d1246a8421f8f598fcb7d6a19bf44e8e73a4f11e37f6d7f3a6609bf91f3cd"}) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x40c201) 19:18:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) (async, rerun: 32) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r4}}, 0x18) (async) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r4, 0x0, "1aa4eb", "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"}}, 0x110) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x400000, 0x0) (async, rerun: 32) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r7}}, 0x18) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000600)={0xa, 0x4, 0xfa00, {r7}}, 0xc) (async) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, 0x0, 0x0) (async, rerun: 32) write$RDMA_USER_CM_CMD_REJECT(r8, &(0x7f0000000700)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x9, "a018ed", "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"}}, 0x110) (rerun: 32) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000580)={0x5, 0x10, 0xfa00, {&(0x7f0000000380), r10, 0x1}}, 0x18) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:18:56 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)={0x0, 0x34, "147ff443c9505f0b931f30b4d12f760ef9ea2f24959d1246a8421f8f598fcb7d6a19bf44e8e73a4f11e37f6d7f3a6609bf91f3cd"}) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x40c201) 19:18:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x20, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000240)=0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) 19:18:56 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x3, {0x4, 0x3, "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", 0x4, 0x3, 0x80, 0x11, 0x4, 0x7, 0x80, 0x10}}}, 0x128) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000480)={0x15, 0x110, 0xfa00, {r2, 0x9, 0x0, 0x0, 0x0, @ib={0x1b, 0x2, 0x5, {"5eccdb4807b3b3040170c242097a9d20"}, 0x7f, 0x2, 0x6}, @in={0x2, 0x4e21, @remote}}}, 0x118) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r4}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r4, 0xa7bb}}, 0x10) write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x0, {0xfffffffd}}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r6}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x87}, {0xa, 0x4e21, 0xfffffffd, @private2, 0x7}, r6}}, 0x48) [ 890.831432] misc userio: No port type given on /dev/userio [ 890.854934] misc userio: No port type given on /dev/userio [ 890.873718] misc userio: No port type given on /dev/userio 19:18:56 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000040)) 19:18:56 executing program 0: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)={0x0, 0x34, "147ff443c9505f0b931f30b4d12f760ef9ea2f24959d1246a8421f8f598fcb7d6a19bf44e8e73a4f11e37f6d7f3a6609bf91f3cd"}) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x40c201) 19:18:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, r1}}, 0x30) [ 890.883658] misc userio: No port type given on /dev/userio 19:18:56 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0xe}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x3, {0x0, 0x70c, "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", 0x3, 0x5a, 0x7, 0x6, 0x81, 0x1f, 0x20, 0x1}, r0}}, 0x128) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x8, @private2}, r0}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x13f, 0x9}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r3}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0xfffffffffffffcc6, 0xfa00, {r3, 0x3a}}, 0x10) [ 890.933910] misc userio: No port type given on /dev/userio 19:18:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x24}}, 0x800) 19:18:57 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000040)) openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async) ioctl$LOOP_CLR_FD(r1, 0x4c01) (async) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000040)) (async) 19:18:57 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x6cc041, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x86f2, 0x800, 0x7fff, 0x5, 0x6, 0x9, 0xca14, 0x5, 0xf5, 0x1, 0xb06, 0x6, 0x97d, 0xfffffffffffffd7b, 0x1], 0x2000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x4e85, 0x5, "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", 0x78, 0x7, 0x6, 0xaa, 0x1f, 0x37, 0x1, 0x1}}}, 0x120) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) 19:18:57 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x3, {0x4, 0x3, "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", 0x4, 0x3, 0x80, 0x11, 0x4, 0x7, 0x80, 0x10}}}, 0x128) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000480)={0x15, 0x110, 0xfa00, {r2, 0x9, 0x0, 0x0, 0x0, @ib={0x1b, 0x2, 0x5, {"5eccdb4807b3b3040170c242097a9d20"}, 0x7f, 0x2, 0x6}, @in={0x2, 0x4e21, @remote}}}, 0x118) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r4}}, 0x18) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r4, 0xa7bb}}, 0x10) write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x0, {0xfffffffd}}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r6}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x87}, {0xa, 0x4e21, 0xfffffffd, @private2, 0x7}, r6}}, 0x48) 19:18:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0xfffffffd, "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", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:18:57 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0xe}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x3, {0x0, 0x70c, "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", 0x3, 0x5a, 0x7, 0x6, 0x81, 0x1f, 0x20, 0x1}, r0}}, 0x128) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x8, @private2}, r0}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x13f, 0x9}}, 0x20) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0xfffffffffffffcc6, 0xfa00, {r3, 0x3a}}, 0x10) 19:18:57 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x6cc041, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x86f2, 0x800, 0x7fff, 0x5, 0x6, 0x9, 0xca14, 0x5, 0xf5, 0x1, 0xb06, 0x6, 0x97d, 0xfffffffffffffd7b, 0x1], 0x2000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x4e85, 0x5, "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", 0x78, 0x7, 0x6, 0xaa, 0x1f, 0x37, 0x1, 0x1}}}, 0x120) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) 19:18:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x24}}, 0x800) 19:18:57 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0xe}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x3, {0x0, 0x70c, "4ae8042e0204e2ee90df09b5783616065382f35c0dfee89e50e5a96b830300e55f028acf1772285e1842ca9e5fd71d5fa8e835c095c30388fc3a65eb30c8e016d906c4c11dd4f11ace7ca63c81078636e3676f12f283756b0ffc01cf72e5625f4003125b900a6aea6b1c905d590a9c71782cbc9b24cf254cfb45a95211881625a4d3521c16e4fbf2a6d2d075f09c7b9daa1a4063f38bc4d96f6a03bda209254ccf8427f05056550b5a73758cbbca9e6a9bed0dbaca52c4c6b89b7e30b46af02a7969a701aece482513341df446c39fc2276dc496daa4cf6254639cf7c3aa0f469afb5bbae651392cd0e52df2ad32b5ba32c370530457a4d92113a26fee1612e9", 0x3, 0x5a, 0x7, 0x6, 0x81, 0x1f, 0x20, 0x1}, r0}}, 0x128) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x8, @private2}, r0}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x13f, 0x9}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r3}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0xfffffffffffffcc6, 0xfa00, {r3, 0x3a}}, 0x10) 19:18:57 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x6cc041, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x86f2, 0x800, 0x7fff, 0x5, 0x6, 0x9, 0xca14, 0x5, 0xf5, 0x1, 0xb06, 0x6, 0x97d, 0xfffffffffffffd7b, 0x1], 0x2000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x4e85, 0x5, "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", 0x78, 0x7, 0x6, 0xaa, 0x1f, 0x37, 0x1, 0x1}}}, 0x120) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x6cc041, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) (async) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x86f2, 0x800, 0x7fff, 0x5, 0x6, 0x9, 0xca14, 0x5, 0xf5, 0x1, 0xb06, 0x6, 0x97d, 0xfffffffffffffd7b, 0x1], 0x2000}) (async) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x4e85, 0x5, "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", 0x78, 0x7, 0x6, 0xaa, 0x1f, 0x37, 0x1, 0x1}}}, 0x120) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) 19:18:57 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x3, {0x4, 0x3, "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", 0x4, 0x3, 0x80, 0x11, 0x4, 0x7, 0x80, 0x10}}}, 0x128) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000480)={0x15, 0x110, 0xfa00, {r2, 0x9, 0x0, 0x0, 0x0, @ib={0x1b, 0x2, 0x5, {"5eccdb4807b3b3040170c242097a9d20"}, 0x7f, 0x2, 0x6}, @in={0x2, 0x4e21, @remote}}}, 0x118) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r4}}, 0x18) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r4, 0xa7bb}}, 0x10) (async) write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x0, {0xfffffffd}}, 0x18) (async, rerun: 32) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r6}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x87}, {0xa, 0x4e21, 0xfffffffd, @private2, 0x7}, r6}}, 0x48) 19:18:57 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000040)) 19:18:57 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0xe}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x3, {0x0, 0x70c, "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", 0x3, 0x5a, 0x7, 0x6, 0x81, 0x1f, 0x20, 0x1}, r0}}, 0x128) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x8, @private2}, r0}}, 0x30) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x13f, 0x9}}, 0x20) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0xfffffffffffffcc6, 0xfa00, {r3, 0x3a}}, 0x10) [ 891.751134] misc userio: No port type given on /dev/userio [ 891.769977] misc userio: No port type given on /dev/userio 19:18:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x24}}, 0x800) 19:18:57 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f0000000040)={0x90, 0x0, r2}, 0x90) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x7140af9f849e4eca, r2, {0x8, 0x4, 0x7, 0x8001}}, 0x20) 19:18:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x30) 19:18:57 executing program 1: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x20}, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000000)={0x5000, 0x2, 0xf6, 0x2, 0x7}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x64, r2, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40080) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74000000354b89d4143bbda22123cb26d7e394af8396a8cae4ae1b4c0e5c7e38fe39e04b5377a1e094f599c19a89963c2004232da7208b5881ee32", @ANYRES16, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:18:57 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xca880, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040), 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000180), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x12) 19:18:57 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000580)="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", 0x1000, 0x0}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x68c700, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000001c0)={0x1, 0x2}, 0x2) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000100)={r1}) write$FUSE_OPEN(r2, &(0x7f0000000200)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x14}}, 0x20) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xca880, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000040), 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000180), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000140)={0x2, 0x3}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:18:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1, 0xfffffffc}}, 0x10) [ 891.879980] misc userio: No port type given on /dev/userio 19:18:57 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f0000000040)={0x90, 0x0, r2}, 0x90) (async) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x7140af9f849e4eca, r2, {0x8, 0x4, 0x7, 0x8001}}, 0x20) 19:18:57 executing program 1: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x20}, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000000)={0x5000, 0x2, 0xf6, 0x2, 0x7}) (async) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000000)={0x5000, 0x2, 0xf6, 0x2, 0x7}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x64, r2, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40080) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x64, r2, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40080) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74000000354b89d4143bbda22123cb26d7e394af8396a8cae4ae1b4c0e5c7e38fe39e04b5377a1e094f599c19a89963c2004232da7208b5881ee32", @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c3301000000000000800c0016000200008000000000000021000000000000000c0001000000a5b4d18c03e7275b000001000000000006001a004e2400000800180064cc7d09951f01010200000000000000004c18925d7aad649ef0a482b9ef0d3eaccdf137682ce90378bf7d1acba7e0c2d42c5b341cbf449f128b04a44f5dde8f0690a479f6f1b378c96b2d4ac2ab95d4cd1fb3498ccd2cfd1eea3b1c562f5b542e8f8513e3ccf1c7fc763c1e647354060d453db8bb080d8bde3f5423d5d7328f5969d62026308ccb21070d10c77b1b6745282723d1245d3e39bfae0c31d8a25af1be479042696bf192ceb9cf9956c0ce92b40ffb11083b"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) [ 891.929338] misc userio: No port type given on /dev/userio [ 892.045700] misc userio: Invalid payload size 19:18:58 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 19:18:58 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f0000000040)={0x90, 0x0, r2}, 0x90) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x7140af9f849e4eca, r2, {0x8, 0x4, 0x7, 0x8001}}, 0x20) 19:18:58 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x42) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0x1, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="060000000000000007780c000800000018210000", @ANYRES32, @ANYBLOB="00000000000000001800000000020000000000000100000018570000060000000000000000000000850000007d000000d5620000100000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x10, 0x2, 0x100}, 0x10, 0x0, r1, 0x0, &(0x7f0000000540)=[0x1, r1, r1, r1]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x4000000, 0x5, 0x3ff, 0x88a, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0x4}, 0x48) getpeername$packet(r1, &(0x7f0000001100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001140)=0x14) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001180), 0x400242, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x15, 0xb, &(0x7f00000012c0)=ANY=[@ANYBLOB="b530f4ff01000000850000007400000018000000070000000000000007000000185600000d000000000000000000000085100000ffffffff1864000006000000000000000010000018180000", @ANYRES32=r4, @ANYBLOB="0000a897bf7e2f000000000000"], &(0x7f0000001000)='GPL\x00', 0x7c0000, 0x93, &(0x7f0000001040)=""/147, 0x41100, 0x8, '\x00', r5, 0xa, r6, 0x8, &(0x7f00000011c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x2, 0xf, 0xb6, 0x734ad90c}, 0x10}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x17, 0x4, 0x0, 0x7, 0x10, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1c, 0x5, 0x4, 0x7fffffff, 0x4, r1, 0x1, '\x00', 0x0, r1, 0x2, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x9, &(0x7f0000000880)=ANY=[@ANYBLOB="180000007f0000000000000005000000180000000000ff7f00001800000000000000000000000900000048900c00ffffffff25810100010000008434ffff0000000017baf83417bddd7c4d0c91945a145f720334a4472d156f4f25fda7b6694f5098b15e68409a5b8e68afcb395cd185bdeafafd4021057e5c9e9598a7163135443fd0a0772dabcc97cf4e9d2084dbcdf94ed2e90cec839b96c48112bcd8f00744fb05d0ea226bea0469b4f6257b309dbd9404f43618860a44d891b4b6c9737316fdc8bbb67c71286e7c55b8178df218"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0xa8, &(0x7f0000000240)=""/168, 0x41000, 0x1, '\x00', r2, 0x1f, r1, 0x8, &(0x7f0000000380)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xf, 0xffffffff, 0x6}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000680)=[r1, r4, r1, 0x1, r7, r8]}, 0x80) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x5, 0x1, 0x5, 0x811, r7, 0xcea, '\x00', 0x0, r1, 0x5, 0x3, 0x1, 0x4}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x9, 0xb, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000bc0)='syzkaller\x00', 0xfffffff7, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x19, r1, 0x8, &(0x7f0000000c00)={0x800, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x3, 0xc, 0x3, 0x7}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c80)=[r1, r8, r8, r7, 0xffffffffffffffff, r8, r8, r4, r7]}, 0x80) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40), 0x200000, 0x0) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d80), 0x12000, 0x0) r13 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r13, 0x0, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@bloom_filter={0x1e, 0x6, 0x4, 0x8, 0x320, r1, 0x1, '\x00', r2, r1, 0x2, 0x3, 0x2, 0xe}, 0x48) r15 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r15, 0x0, 0x0) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0x18, 0x2, 0x6, 0x5, 0x100, r4, 0x0, '\x00', r2, r1, 0x4, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0xf, 0xd, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000086a00000000000000000000850000003800000018250000f4f73c0ec1c31af9ada4f255614bda70065e6028522d432aefa7cb53c5b5b2423a404cc573339f4da2a10ea6be97f27462db2d8950dd197895e8f73c79cd7705d8b7c8d010f0aba1ffe0dcd3f849fbc29278ed72a4e77c80747a1e8107a1c4975efbf18105d631a7ef2130e134e7702e8bf289b4d8c8b1", @ANYRES32=r9, @ANYBLOB="0000000000010000d481f8ff0100000085100000f8ffffff18100000", @ANYRES32=r7, @ANYBLOB="00000000000000001831000004000000000000000000000085000000140000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x1ee, 0xe, &(0x7f0000000a80)=""/14, 0x7123b563c6ba113d, 0x14, '\x00', 0x0, 0x12, r1, 0x8, &(0x7f0000000ac0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x6, 0x9}, 0x10, 0x0, r10, 0x0, &(0x7f0000000ec0)=[r4, r11, r12, r13, r14, r7, r15, r16]}, 0x80) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000000c0)={r1, 0x2696, {0x0, 0x0, 0x0, 0x8000, 0x5, 0x0, 0x5, 0x1f, 0x8, "3a144a5b9cd106c4d832c061b945fd642027fc9c95e673e51bcc0d20f6b80029253fb386461ccefa4828228a0309aa1403641399de3bd02ad8aafefb935210e5", "9ab7fd45c07359d05d889126c1d986ee66dbd9b9bb7bec1cf9f8da2f4afa927823f83ccace5b69fed232d941d7134891c84c6873631addf3564c512b23ee108c", "85e74c6a5319fc2661868655b598ffb9a007811f72161f61351887304847cad0", [0x876, 0xfffffffffffffffa]}}) 19:18:58 executing program 1: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x20}, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) (async) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000000)={0x5000, 0x2, 0xf6, 0x2, 0x7}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x64, r2, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40080) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74000000354b89d4143bbda22123cb26d7e394af8396a8cae4ae1b4c0e5c7e38fe39e04b5377a1e094f599c19a89963c2004232da7208b5881ee32", @ANYRES16, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:18:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1, 0xfffffffc}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1, 0xfffffffc}}, 0x10) (async) 19:18:58 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xca880, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040), 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000180), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x6}, 0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x12) 19:18:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000000)=""/55) 19:18:58 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 19:18:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6fe3}, {0xa, 0x4e24, 0x7378, @dev={0xfe, 0x80, '\x00', 0x15}, 0x7ff}, r2, 0x1}}, 0x48) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000440)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002dbd7000fcdbdf25010000000800030006000000080002000300000008000300030000001c000180080003007f00000108000700", @ANYRES32=0x0, @ANYBLOB="020001000000080002000400000008000200010000001c000180080007000000", @ANYRES32=0x0, @ANYBLOB="060001000200000008000300e0000001"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4004800) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r5}}, 0xc) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 19:18:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0xd2e1, 0x3) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x7ff, 0x200]) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x81, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) [ 892.149608] misc userio: Invalid payload size 19:18:58 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xca880, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040), 0x2) (async) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000180), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x6}, 0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x12) 19:18:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000000)=""/55) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000000)=""/55) (async) 19:18:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1, 0xfffffffc}}, 0x10) 19:18:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x50, r2, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x50}}, 0x24000000) 19:18:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0xd2e1, 0x3) (async) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x7ff, 0x200]) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x81, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 19:18:58 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 19:18:58 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0xf, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7f}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x8, 0xb, 0x7, 0xffffffffffffffff, 0x1}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1}, @exit, @map_fd={0x18, 0x4}, @ldst={0x2, 0x0, 0x2, 0x0, 0xb, 0x2, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x11, &(0x7f0000000100)=""/17, 0x41100, 0x10, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0xb, 0x5, 0x9}, 0x10, 0xffffffffffffffff}, 0x80) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r2, 0x1}, 0x10) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) [ 892.278434] misc userio: Invalid payload size 19:18:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0xd2e1, 0x3) (async) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x7ff, 0x200]) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x81, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 19:18:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000000)=""/55) 19:18:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0xffffffffffffff7e, 0xfa00, {0x1001, &(0x7f00000003c0), 0x0, 0x9}}, 0xfeaf) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000540)={0x12, 0x10, 0xfa00, {&(0x7f0000000440), r3, r4}}, 0x18) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x402, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000380)={0x0, 0xfffffffffffffe79, 0xfa00, {0x14, &(0x7f0000000340), 0x13f, 0x6}}, 0xfe78) 19:18:58 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, r0}}, 0x128) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0xd0403, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000540)={0x7, 0x1, 0x8001}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000580)={0x15, 0x110, 0xfa00, {r0, 0x4db8, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x3f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x9}, @in6={0xa, 0x4e20, 0x2, @private0, 0xf6cb}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20084081) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24000804) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f00000004c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000480), r0}}, 0x18) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000400)={0x12, 0x10, 0xfa00, {&(0x7f0000000380), r0, r7}}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r0}}, 0x5d) 19:18:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000a40), 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:18:58 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) r2 = getpid() ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x954, 0x5, 0x7f, 0x9, 0x800, r2}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000009000002000000"], 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:18:58 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0xf, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7f}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x8, 0xb, 0x7, 0xffffffffffffffff, 0x1}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1}, @exit, @map_fd={0x18, 0x4}, @ldst={0x2, 0x0, 0x2, 0x0, 0xb, 0x2, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x11, &(0x7f0000000100)=""/17, 0x41100, 0x10, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0xb, 0x5, 0x9}, 0x10, 0xffffffffffffffff}, 0x80) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r2, 0x1}, 0x10) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:18:58 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x103) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) [ 892.384925] misc userio: No port type given on /dev/userio 19:18:58 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x103) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x103) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) 19:18:58 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) getpid() (async) r2 = getpid() ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x954, 0x5, 0x7f, 0x9, 0x800, r2}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000009000002000000"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:18:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000a40), 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:18:58 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, r0}}, 0x128) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async, rerun: 64) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0xd0403, 0x0) (rerun: 64) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000540)={0x7, 0x1, 0x8001}) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000580)={0x15, 0x110, 0xfa00, {r0, 0x4db8, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x3f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x9}, @in6={0xa, 0x4e20, 0x2, @private0, 0xf6cb}}}, 0x118) (async, rerun: 32) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async, rerun: 32) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20084081) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24000804) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f00000004c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000480), r0}}, 0x18) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000400)={0x12, 0x10, 0xfa00, {&(0x7f0000000380), r0, r7}}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r0}}, 0x5d) 19:18:58 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0xf, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7f}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x8, 0xb, 0x7, 0xffffffffffffffff, 0x1}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1}, @exit, @map_fd={0x18, 0x4}, @ldst={0x2, 0x0, 0x2, 0x0, 0xb, 0x2, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x11, &(0x7f0000000100)=""/17, 0x41100, 0x10, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0xb, 0x5, 0x9}, 0x10, 0xffffffffffffffff}, 0x80) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r2, 0x1}, 0x10) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:18:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0xffffffffffffff7e, 0xfa00, {0x1001, &(0x7f00000003c0), 0x0, 0x9}}, 0xfeaf) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000540)={0x12, 0x10, 0xfa00, {&(0x7f0000000440), r3, r4}}, 0x18) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x402, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000380)={0x0, 0xfffffffffffffe79, 0xfa00, {0x14, &(0x7f0000000340), 0x13f, 0x6}}, 0xfe78) [ 892.530427] misc userio: No port type given on /dev/userio 19:18:58 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x103) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x103) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) 19:18:58 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async) r2 = getpid() ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x954, 0x5, 0x7f, 0x9, 0x800, r2}) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000009000002000000"], 0x14}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:18:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000a40), 0x10) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:18:58 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8041, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x103000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)="3e76c02fe3f9ef8e92b628daeaa946ea3c4c51b9989567a7640bab896774a44465721a", 0x23}) clock_gettime(0x6, &(0x7f0000000200)={0x0, 0x0}) select(0x40, &(0x7f0000000140)={0x100000001, 0x0, 0x3, 0xfff, 0x7fff, 0x400, 0x0, 0xfffffffffffffa52}, &(0x7f00000003c0)={0x0, 0x7f, 0x7, 0x3, 0xf9b6, 0x1, 0x100000001, 0x4}, &(0x7f00000001c0)={0x81, 0xfffffffffffffff7, 0x1, 0x5, 0xffffffffffff9f29, 0x4, 0x8000000000000000}, &(0x7f0000000240)={r2, r3/1000+60000}) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000100)={0x1200000000000000, 0x2, 0x8, 0xa, 0x14}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000280)={0xffffffffffffffff, 0x4, {0x0, 0x0, 0x0, 0x6, 0xd04e, 0x0, 0x0, 0xe, 0x8, "dc71f677ef79e120759b5935c520dbadcbbd55f0a5c16bb725e15bcea8d65e99b0eb62966e86112da76bce4ebaed8f83dd76569df517177ed43af93da4ede1fc", "bb75d208765c88c8bb8d47e94c0823605933abeb771f4918d5c0e840c4d923a5cc1df8c2dc44d8d8c0f82556acdf1055807b790c5e78c142856961c21c29c4f6", "c3c0c1ce84e8c4fd82d6c5a0409ddb0a70e7c4613af6d4d60443ea4f952ff79e", [0x1, 0x20]}}) [ 892.617462] misc userio: No port type given on /dev/userio 19:18:58 executing program 0: write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x3, 0xe34, 0x6, 0x101, 0x3f, {0x0, 0x7, 0x0, 0x9, 0x0, 0x6, 0x5, 0x7, 0xfffffff9, 0xa000, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x689c}}}, 0x90) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 19:18:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xbe}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x15}, 0x40000) 19:18:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xffffffc0, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @ib={0x1b, 0xffe0, 0x9, {"9572fc38d3021444b2482c43e8518b7f"}, 0x5, 0x8, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r1, 0x3}}, 0x18) 19:18:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xbe}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x15}, 0x40000) 19:18:58 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8041, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x103000) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x103000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)="3e76c02fe3f9ef8e92b628daeaa946ea3c4c51b9989567a7640bab896774a44465721a", 0x23}) clock_gettime(0x6, &(0x7f0000000200)={0x0, 0x0}) select(0x40, &(0x7f0000000140)={0x100000001, 0x0, 0x3, 0xfff, 0x7fff, 0x400, 0x0, 0xfffffffffffffa52}, &(0x7f00000003c0)={0x0, 0x7f, 0x7, 0x3, 0xf9b6, 0x1, 0x100000001, 0x4}, &(0x7f00000001c0)={0x81, 0xfffffffffffffff7, 0x1, 0x5, 0xffffffffffff9f29, 0x4, 0x8000000000000000}, &(0x7f0000000240)={r2, r3/1000+60000}) (async) select(0x40, &(0x7f0000000140)={0x100000001, 0x0, 0x3, 0xfff, 0x7fff, 0x400, 0x0, 0xfffffffffffffa52}, &(0x7f00000003c0)={0x0, 0x7f, 0x7, 0x3, 0xf9b6, 0x1, 0x100000001, 0x4}, &(0x7f00000001c0)={0x81, 0xfffffffffffffff7, 0x1, 0x5, 0xffffffffffff9f29, 0x4, 0x8000000000000000}, &(0x7f0000000240)={r2, r3/1000+60000}) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000100)={0x1200000000000000, 0x2, 0x8, 0xa, 0x14}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000280)={0xffffffffffffffff, 0x4, {0x0, 0x0, 0x0, 0x6, 0xd04e, 0x0, 0x0, 0xe, 0x8, "dc71f677ef79e120759b5935c520dbadcbbd55f0a5c16bb725e15bcea8d65e99b0eb62966e86112da76bce4ebaed8f83dd76569df517177ed43af93da4ede1fc", "bb75d208765c88c8bb8d47e94c0823605933abeb771f4918d5c0e840c4d923a5cc1df8c2dc44d8d8c0f82556acdf1055807b790c5e78c142856961c21c29c4f6", "c3c0c1ce84e8c4fd82d6c5a0409ddb0a70e7c4613af6d4d60443ea4f952ff79e", [0x1, 0x20]}}) [ 892.794540] misc userio: No port type given on /dev/userio 19:18:58 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, r0}}, 0x128) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0xd0403, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000540)={0x7, 0x1, 0x8001}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000580)={0x15, 0x110, 0xfa00, {r0, 0x4db8, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x3f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x9}, @in6={0xa, 0x4e20, 0x2, @private0, 0xf6cb}}}, 0x118) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async, rerun: 32) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20084081) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24000804) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f00000004c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000480), r0}}, 0x18) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000400)={0x12, 0x10, 0xfa00, {&(0x7f0000000380), r0, r7}}, 0x18) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r0}}, 0x5d) 19:18:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r1, 0x0, "ee0ca8", "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"}}, 0x110) 19:18:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xbe}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x15}, 0x40000) 19:18:58 executing program 0: write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x3, 0xe34, 0x6, 0x101, 0x3f, {0x0, 0x7, 0x0, 0x9, 0x0, 0x6, 0x5, 0x7, 0xfffffff9, 0xa000, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x689c}}}, 0x90) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 19:18:58 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8041, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x103000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)="3e76c02fe3f9ef8e92b628daeaa946ea3c4c51b9989567a7640bab896774a44465721a", 0x23}) clock_gettime(0x6, &(0x7f0000000200)={0x0, 0x0}) select(0x40, &(0x7f0000000140)={0x100000001, 0x0, 0x3, 0xfff, 0x7fff, 0x400, 0x0, 0xfffffffffffffa52}, &(0x7f00000003c0)={0x0, 0x7f, 0x7, 0x3, 0xf9b6, 0x1, 0x100000001, 0x4}, &(0x7f00000001c0)={0x81, 0xfffffffffffffff7, 0x1, 0x5, 0xffffffffffff9f29, 0x4, 0x8000000000000000}, &(0x7f0000000240)={r2, r3/1000+60000}) (async) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000100)={0x1200000000000000, 0x2, 0x8, 0xa, 0x14}) (async) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000280)={0xffffffffffffffff, 0x4, {0x0, 0x0, 0x0, 0x6, 0xd04e, 0x0, 0x0, 0xe, 0x8, "dc71f677ef79e120759b5935c520dbadcbbd55f0a5c16bb725e15bcea8d65e99b0eb62966e86112da76bce4ebaed8f83dd76569df517177ed43af93da4ede1fc", "bb75d208765c88c8bb8d47e94c0823605933abeb771f4918d5c0e840c4d923a5cc1df8c2dc44d8d8c0f82556acdf1055807b790c5e78c142856961c21c29c4f6", "c3c0c1ce84e8c4fd82d6c5a0409ddb0a70e7c4613af6d4d60443ea4f952ff79e", [0x1, 0x20]}}) 19:18:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xffffffc0, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @ib={0x1b, 0xffe0, 0x9, {"9572fc38d3021444b2482c43e8518b7f"}, 0x5, 0x8, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r1, 0x3}}, 0x18) 19:18:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x2c, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xdc}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8bc1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x41) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) 19:18:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r1, 0x0, "ee0ca8", "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"}}, 0x110) 19:18:58 executing program 0: write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x3, 0xe34, 0x6, 0x101, 0x3f, {0x0, 0x7, 0x0, 0x9, 0x0, 0x6, 0x5, 0x7, 0xfffffff9, 0xa000, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x689c}}}, 0x90) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 19:18:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xffffffc0, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @ib={0x1b, 0xffe0, 0x9, {"9572fc38d3021444b2482c43e8518b7f"}, 0x5, 0x8, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r1, 0x3}}, 0x18) 19:18:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x2c, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xdc}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8bc1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x41) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) 19:18:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x2c, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xdc}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8bc1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x41) (async, rerun: 64) r3 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 64) getsockname$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) [ 892.974081] misc userio: No port type given on /dev/userio 19:18:59 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x113, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1}, r1}}, 0x128) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r3}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, r3}}, 0x30) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000280)={0x1, 0x2, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) 19:18:59 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) clock_gettime(0x2, &(0x7f0000000040)) clock_gettime(0xfde6928b1ad13bab, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:18:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (async) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r1, 0x0, "ee0ca8", "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"}}, 0x110) 19:18:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x24040014}, 0x4040801) 19:18:59 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000000)={0x2, 0x8, 0x6}) 19:18:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xffffffc0, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @ib={0x1b, 0xffe0, 0x9, {"9572fc38d3021444b2482c43e8518b7f"}, 0x5, 0x8, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r1, 0x3}}, 0x18) 19:18:59 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000000)={0x2, 0x8, 0x6}) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) (async) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) (async) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000000)={0x2, 0x8, 0x6}) (async) 19:18:59 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x24040014}, 0x4040801) 19:18:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r1, 0x3}}, 0x18) 19:18:59 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) clock_gettime(0x2, &(0x7f0000000040)) clock_gettime(0xfde6928b1ad13bab, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) (async) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:18:59 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000000)={0x2, 0x8, 0x6}) 19:18:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1, 0x72}}, 0x10) [ 893.240889] misc userio: No port type given on /dev/userio 19:18:59 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x113, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1}, r1}}, 0x128) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980), 0x13f, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r3}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, r3}}, 0x30) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, r3}}, 0x30) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000280)={0x1, 0x2, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) 19:18:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), 0xffffffffffffffff, 0x3}}, 0x18) 19:18:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x24040014}, 0x4040801) 19:18:59 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x62281) 19:18:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1, 0x72}}, 0x10) 19:18:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), 0xffffffffffffffff, 0x3}}, 0x18) 19:18:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, &(0x7f0000000ac0)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000200)=0xb0ce) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100)=0x1, 0x1) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140)=0xfffffffd, 0x4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000300)=0x40, 0x4) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7008000000000000000006000e001f00000005001200060000000c000f00a1b55c32b36d37fdea04e0b4e633019e877f0637171b970016ffff00008000000000000021000000000000006b0c00010000000000010000000000060000000800180064cc7d09951f010102391b"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000280)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000002c0), 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="b80006000d2af1c9851d8dc8f91baa6b9c6c315328a896bd62bdb41470f9b4aec4e529a2a81b986553f7b5bc9d00783b4b5e15ec07ec1cf3e96c260666aceeae75620197b17f01ea563e56e9588a170757bf76b07a21650a255da18851fb497786b0b6af976a9f80a4e4edf3526468f034abfd42dd5bd677493dc02a5caf1580c2617d4d5b53eaeb17e976549237c2bd51f032246b6b39b5f96bdeca32f90ffaeff3eb68ca87ed0847dbd3c264a2d4c1b5437df295a7b4dd420d748082a781c0b2a2066af9f789b914732ee728cd091183de83210e4cc5a15bfcaa6f1cf98d1e5873e3e93ff9d869b7e5da9710b40d4b000d8d7f12d8b35c39b50361064a2bc5b113435c3b96280b5d4beee47863d3917d54449ce654d8093c170a748079983a6be233b62bfda3eb1d107dc3518b413df23c94322c03be89a29f0683b71fa4aaf89c45cbeecd6658c28eee6c7e46e5ee8fab59e53b34ea12baae887d62dcecbdeb787e2a226b37c6cc0f5b2cfeb2745d996a8313ba047cb941151b89bbbd050fbf0474f565fc9209030955822eff02", @ANYRES16=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x8051}, 0x800) 19:18:59 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) clock_gettime(0x2, &(0x7f0000000040)) (async) clock_gettime(0xfde6928b1ad13bab, 0x0) (async) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:18:59 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x62281) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x62281) (async) 19:18:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, &(0x7f0000000ac0)) (async, rerun: 32) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000200)=0xb0ce) (rerun: 32) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100)=0x1, 0x1) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140)=0xfffffffd, 0x4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) (async, rerun: 32) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000300)=0x40, 0x4) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7008000000000000000006000e001f00000005001200060000000c000f00a1b55c32b36d37fdea04e0b4e633019e877f0637171b970016ffff00008000000000000021000000000000006b0c00010000000000010000000000060000000800180064cc7d09951f010102391b"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000280)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000002c0), 0x4) (async, rerun: 64) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="b80006000d2af1c9851d8dc8f91baa6b9c6c315328a896bd62bdb41470f9b4aec4e529a2a81b986553f7b5bc9d00783b4b5e15ec07ec1cf3e96c260666aceeae75620197b17f01ea563e56e9588a170757bf76b07a21650a255da18851fb497786b0b6af976a9f80a4e4edf3526468f034abfd42dd5bd677493dc02a5caf1580c2617d4d5b53eaeb17e976549237c2bd51f032246b6b39b5f96bdeca32f90ffaeff3eb68ca87ed0847dbd3c264a2d4c1b5437df295a7b4dd420d748082a781c0b2a2066af9f789b914732ee728cd091183de83210e4cc5a15bfcaa6f1cf98d1e5873e3e93ff9d869b7e5da9710b40d4b000d8d7f12d8b35c39b50361064a2bc5b113435c3b96280b5d4beee47863d3917d54449ce654d8093c170a748079983a6be233b62bfda3eb1d107dc3518b413df23c94322c03be89a29f0683b71fa4aaf89c45cbeecd6658c28eee6c7e46e5ee8fab59e53b34ea12baae887d62dcecbdeb787e2a226b37c6cc0f5b2cfeb2745d996a8313ba047cb941151b89bbbd050fbf0474f565fc9209030955822eff02", @ANYRES16=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x8051}, 0x800) (rerun: 64) [ 893.402626] misc userio: No port type given on /dev/userio 19:18:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), 0xffffffffffffffff, 0x3}}, 0x18) 19:18:59 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x62281) 19:18:59 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x113, 0x1}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x113, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1}, r1}}, 0x128) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1}, r1}}, 0x128) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r3}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, r3}}, 0x30) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000280)={0x1, 0x2, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000280)={0x1, 0x2, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) 19:18:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1, 0x72}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1, 0x72}}, 0x10) (async) 19:18:59 executing program 2: openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2103, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xca880, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040), 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000180), 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) [ 893.494284] misc userio: No port type given on /dev/userio 19:18:59 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000000), 0x4) 19:18:59 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x6, &(0x7f0000000240)=0x2) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000280)=0x6, &(0x7f0000000300)=0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) 19:18:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, &(0x7f0000000ac0)) (async) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000200)=0xb0ce) (async) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100)=0x1, 0x1) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140)=0xfffffffd, 0x4) (async, rerun: 32) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) (rerun: 32) connect$phonet_pipe(r2, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) (async, rerun: 64) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000300)=0x40, 0x4) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7008000000000000000006000e001f00000005001200060000000c000f00a1b55c32b36d37fdea04e0b4e633019e877f0637171b970016ffff00008000000000000021000000000000006b0c00010000000000010000000000060000000800180064cc7d09951f010102391b"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000280)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000002c0), 0x4) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x8051}, 0x800) 19:18:59 executing program 2: openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2103, 0x0) (async) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xca880, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040), 0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000180), 0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:18:59 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) (async) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000000), 0x4) 19:18:59 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r0, 0x3}}, 0x18) 19:18:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x3ffffd, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:18:59 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x6, &(0x7f0000000240)=0x2) (async) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000280)=0x6, &(0x7f0000000300)=0x4) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) 19:18:59 executing program 2: openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2103, 0x0) (async, rerun: 32) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xca880, 0x0) (rerun: 32) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040), 0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000180), 0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:18:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x78, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x2004c040) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x8001, 0x72a8, 0x5b4, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x7ff}}, &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0xd0, &(0x7f0000000380)=""/208, 0x41000, 0x6, '\x00', r1, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x8000, 0xff, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r2]}, 0x80) 19:18:59 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000000), 0x4) 19:18:59 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r0, 0x3}}, 0x18) 19:18:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x78, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x2004c040) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x8001, 0x72a8, 0x5b4, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x7ff}}, &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0xd0, &(0x7f0000000380)=""/208, 0x41000, 0x6, '\x00', r1, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x8000, 0xff, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r2]}, 0x80) 19:18:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x3ffffd, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:18:59 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x6, &(0x7f0000000240)=0x2) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000280)=0x6, &(0x7f0000000300)=0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x6, &(0x7f0000000240)=0x2) (async) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000280)=0x6, &(0x7f0000000300)=0x4) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) (async) 19:18:59 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r0, 0x3}}, 0x18) 19:18:59 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x78, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x2004c040) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x8001, 0x72a8, 0x5b4, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x7ff}}, &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0xd0, &(0x7f0000000380)=""/208, 0x41000, 0x6, '\x00', r1, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x8000, 0xff, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r2]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x7ff}}, &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0xd0, &(0x7f0000000380)=""/208, 0x41000, 0x6, '\x00', r1, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x8000, 0xff, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r2]}, 0x80) 19:18:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r1, 0x3}}, 0x18) 19:18:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x3ffffd, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:18:59 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0200ff000000fedbdffbe32b270002000700004e2300"/32], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xc0, r3, 0x300, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1a}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x17}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4c050}, 0x40000) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r2, 0x5, {0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x4, 0x6, 0x18, "d488e4445300c7fc983bb3f9af25d83e220396f3236e9a3cfef6ea1f3ccec86aff3e3e223eca04d5738d311cabd6192d6f195678b5d017552b00300a6291ebe3", "22ba0a589dd848a530a81ba3307ee0f7ead972e7ba41ba5c511d91bcc8e251f12a9dec7d66f204701d8f405b66fff7a6e958c4fc803c5bb8d873644eb1bf5935", "0c781505397803266efcac8910f5119efb5aa01dcf4565de51bb63862c5d38ec", [0x5, 0x6]}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r4, 0x2, 0xff, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) getpeername$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)={0xd8, r4, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5d}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x2000c840) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000000c0)={0xffffffffffffffff, 0x2, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x16, 0x0, "54275002e541d86da1257b82bc19bf7b083e6954d88c83dd97c14d54ae918c36854ed1c85e6eb7460fd33f1e89dea11d5ef755db5865ade031efd84ea526e5b0", "953fbcda04f020a27b2106fa501344a2222978eecedf77e5cd8c3cbf48dd66fc886557083cfff2dba0dd54c69a91d9647495e3ae2eba801784bbc1b655cbe4a9", "28062a16b1dd2f556e3b20426badd0aa4aa826d49fd82b97ae958b59fbc1b9c7", [0x20, 0x9]}}) 19:18:59 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:18:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYRES32], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000000), 0x2) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000040)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80044000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xff}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x48000) 19:18:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r1, 0x3}}, 0x18) 19:18:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000080)=0x33) 19:18:59 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:00 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x0, 0x1, "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", 0x7, 0x5, 0x3, 0x1, 0x0, 0x1, 0x7f, 0x1}, r3}}, 0x120) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (async, rerun: 64) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000080)=0x33) (rerun: 64) 19:19:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r1, 0x3}}, 0x18) [ 894.014255] misc userio: No port type given on /dev/userio 19:19:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (async) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000080)=0x33) 19:19:00 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:00 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0200ff000000fedbdffbe32b270002000700004e2300"/32], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xc0, r3, 0x300, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1a}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x17}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4c050}, 0x40000) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r2, 0x5, {0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x4, 0x6, 0x18, "d488e4445300c7fc983bb3f9af25d83e220396f3236e9a3cfef6ea1f3ccec86aff3e3e223eca04d5738d311cabd6192d6f195678b5d017552b00300a6291ebe3", "22ba0a589dd848a530a81ba3307ee0f7ead972e7ba41ba5c511d91bcc8e251f12a9dec7d66f204701d8f405b66fff7a6e958c4fc803c5bb8d873644eb1bf5935", "0c781505397803266efcac8910f5119efb5aa01dcf4565de51bb63862c5d38ec", [0x5, 0x6]}}) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async, rerun: 32) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r4, 0x2, 0xff, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) (async) getpeername$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)={0xd8, r4, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5d}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x2000c840) (async) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000000c0)={0xffffffffffffffff, 0x2, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x16, 0x0, "54275002e541d86da1257b82bc19bf7b083e6954d88c83dd97c14d54ae918c36854ed1c85e6eb7460fd33f1e89dea11d5ef755db5865ade031efd84ea526e5b0", "953fbcda04f020a27b2106fa501344a2222978eecedf77e5cd8c3cbf48dd66fc886557083cfff2dba0dd54c69a91d9647495e3ae2eba801784bbc1b655cbe4a9", "28062a16b1dd2f556e3b20426badd0aa4aa826d49fd82b97ae958b59fbc1b9c7", [0x20, 0x9]}}) 19:19:00 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x0, 0x1, "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", 0x7, 0x5, 0x3, 0x1, 0x0, 0x1, 0x7f, 0x1}, r3}}, 0x120) (async) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x0, 0x1, "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", 0x7, 0x5, 0x3, 0x1, 0x0, 0x1, 0x7f, 0x1}, r3}}, 0x120) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r1, 0x3}}, 0x18) 19:19:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYRES32], 0x44}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000000), 0x2) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000040)) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80044000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xff}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x48000) 19:19:00 executing program 5: ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000200)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:00 executing program 1: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001700)={0x53, 0xfffffffffffffffb, 0x53, 0x7f, @scatter={0x8, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)=""/156, 0x9c}, {&(0x7f0000000280)=""/228, 0xe4}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000100)=""/63, 0x3f}, {&(0x7f0000001380)=""/167, 0xa7}, {&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000001440)=""/153, 0x99}, {&(0x7f0000001500)=""/38, 0x26}]}, &(0x7f00000015c0)="001e35b99c52ab1e18a88a822010c7b0e1e559b094abcf6b9486f38a391f37f24c088c668b559d95ded0cd868d1babdb37d702f8e2d045b6b41926231671b851e1a3cf83100509aae50db61a65ffb3305b7236", &(0x7f0000001640)=""/108, 0x9, 0x10002, 0x0, &(0x7f00000016c0)}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:00 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0200ff000000fedbdffbe32b270002000700004e2300"/32], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xc0, r3, 0x300, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1a}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x17}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4c050}, 0x40000) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r2, 0x5, {0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x4, 0x6, 0x18, "d488e4445300c7fc983bb3f9af25d83e220396f3236e9a3cfef6ea1f3ccec86aff3e3e223eca04d5738d311cabd6192d6f195678b5d017552b00300a6291ebe3", "22ba0a589dd848a530a81ba3307ee0f7ead972e7ba41ba5c511d91bcc8e251f12a9dec7d66f204701d8f405b66fff7a6e958c4fc803c5bb8d873644eb1bf5935", "0c781505397803266efcac8910f5119efb5aa01dcf4565de51bb63862c5d38ec", [0x5, 0x6]}}) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r2, 0x5, {0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x4, 0x6, 0x18, "d488e4445300c7fc983bb3f9af25d83e220396f3236e9a3cfef6ea1f3ccec86aff3e3e223eca04d5738d311cabd6192d6f195678b5d017552b00300a6291ebe3", "22ba0a589dd848a530a81ba3307ee0f7ead972e7ba41ba5c511d91bcc8e251f12a9dec7d66f204701d8f405b66fff7a6e958c4fc803c5bb8d873644eb1bf5935", "0c781505397803266efcac8910f5119efb5aa01dcf4565de51bb63862c5d38ec", [0x5, 0x6]}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r4, 0x2, 0xff, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) getpeername$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) (async) getpeername$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)={0xd8, r4, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5d}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x2000c840) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000000c0)={0xffffffffffffffff, 0x2, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x16, 0x0, "54275002e541d86da1257b82bc19bf7b083e6954d88c83dd97c14d54ae918c36854ed1c85e6eb7460fd33f1e89dea11d5ef755db5865ade031efd84ea526e5b0", "953fbcda04f020a27b2106fa501344a2222978eecedf77e5cd8c3cbf48dd66fc886557083cfff2dba0dd54c69a91d9647495e3ae2eba801784bbc1b655cbe4a9", "28062a16b1dd2f556e3b20426badd0aa4aa826d49fd82b97ae958b59fbc1b9c7", [0x20, 0x9]}}) 19:19:00 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x0, 0x1, "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", 0x7, 0x5, 0x3, 0x1, 0x0, 0x1, 0x7f, 0x1}, r3}}, 0x120) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:00 executing program 5: ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000200)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000200)) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) (async) 19:19:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r1, 0x3}}, 0x18) [ 894.205904] misc userio: No port type given on /dev/userio 19:19:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYRES32], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000000), 0x2) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000040)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80044000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xff}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x48000) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80044000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xff}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x48000) 19:19:00 executing program 1: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001700)={0x53, 0xfffffffffffffffb, 0x53, 0x7f, @scatter={0x8, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)=""/156, 0x9c}, {&(0x7f0000000280)=""/228, 0xe4}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000100)=""/63, 0x3f}, {&(0x7f0000001380)=""/167, 0xa7}, {&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000001440)=""/153, 0x99}, {&(0x7f0000001500)=""/38, 0x26}]}, &(0x7f00000015c0)="001e35b99c52ab1e18a88a822010c7b0e1e559b094abcf6b9486f38a391f37f24c088c668b559d95ded0cd868d1babdb37d702f8e2d045b6b41926231671b851e1a3cf83100509aae50db61a65ffb3305b7236", &(0x7f0000001640)=""/108, 0x9, 0x10002, 0x0, &(0x7f00000016c0)}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:00 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) connect$phonet_pipe(r1, &(0x7f0000000080)={0x23, 0x0, 0x1f, 0x2}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x38, 0x4) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x203) 19:19:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r1, 0x3}}, 0x18) 19:19:00 executing program 5: ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000200)) (async) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000200)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:00 executing program 4: ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)=ANY=[@ANYBLOB="55000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b1fa3e03f38f5e650c1181b00000000003dc44547112100"]) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f00000004c0)={0x2, 0x0, [{}, {}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r2}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r4, 0x5, "add1bc", "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"}}, 0x110) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r2}}, 0x10) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000640)={0xffffffffffffffff}, 0x2e, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000900)={0x5, 0x10, 0xfa00, {&(0x7f0000000700), r7, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000540)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000005c0)={0x7, 0x8, 0xfa00, {r8, 0x6}}, 0x10) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {r4, 0x100, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x9, @local, 0x5}, @ib={0x1b, 0x6, 0x5, {"61b4bd5a2001c5bf952341464971e740"}, 0xfffffffffffffff9, 0x7fffffffffffffff, 0x6}}}, 0x118) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, 0x0, 0x0) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a40), 0x220000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, &(0x7f0000000ac0)={0x0, 0x4, 0x2, &(0x7f0000000a80)=0x8}) ioctl$SG_BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000040)={'\x00', 0xdc, 0x3ff, 0x1, 0x1, 0x8, 0xffffffffffffffff}) 19:19:00 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) connect$phonet_pipe(r1, &(0x7f0000000080)={0x23, 0x0, 0x1f, 0x2}, 0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x38, 0x4) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x203) 19:19:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), 0xffffffffffffffff, 0x3}}, 0x18) 19:19:00 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0), 0x106, 0x6}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r5}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x1, {0x2, 0x0, "1e46491fa537a42566f5b71c5f49380a595715aa835104ff7b9d1a55795793492c042f4cc6b777051e8e2595da59c3a7bf10a614183ee1290d37a077c465f552926e01b57648ffb0fb7c1387f88375e57a1eb6d34bb7ff3667dbf0622d1d1e8cb832b6e09731163060faee9f5edabf48c897aa57c6e2166eabd3c55bae8c3c2a41b8e1fa5b1170a9be3656dd85f40b928961f828ce111fb9ed70ddad7437a09191b6366ef5482d974e7e91d47f749cade3781404af62b33a8b07182ba502ac9c1bcb96f08bb23532b20dbfff344b228ea7751151c56ed5d0faf6f6970c8f8aabe13083a8cbfeb36f86d24e6ea632e5e4332c0342f233addfcc941410c1f955ad", 0x1c, 0x4, 0x7, 0xe5, 0x40, 0x0, 0x3}, r5}}, 0x128) 19:19:00 executing program 1: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001700)={0x53, 0xfffffffffffffffb, 0x53, 0x7f, @scatter={0x8, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)=""/156, 0x9c}, {&(0x7f0000000280)=""/228, 0xe4}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000100)=""/63, 0x3f}, {&(0x7f0000001380)=""/167, 0xa7}, {&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000001440)=""/153, 0x99}, {&(0x7f0000001500)=""/38, 0x26}]}, &(0x7f00000015c0)="001e35b99c52ab1e18a88a822010c7b0e1e559b094abcf6b9486f38a391f37f24c088c668b559d95ded0cd868d1babdb37d702f8e2d045b6b41926231671b851e1a3cf83100509aae50db61a65ffb3305b7236", &(0x7f0000001640)=""/108, 0x9, 0x10002, 0x0, &(0x7f00000016c0)}) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) [ 894.463847] misc userio: No port type given on /dev/userio 19:19:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), 0xffffffffffffffff, 0x3}}, 0x18) 19:19:00 executing program 4: ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)=ANY=[@ANYBLOB="55000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b1fa3e03f38f5e650c1181b00000000003dc44547112100"]) (async) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f00000004c0)={0x2, 0x0, [{}, {}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r2}}, 0x18) (async) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r4, 0x5, "add1bc", "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"}}, 0x110) (async) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r2}}, 0x10) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000640)={0xffffffffffffffff}, 0x2e, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000900)={0x5, 0x10, 0xfa00, {&(0x7f0000000700), r7, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000540)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000005c0)={0x7, 0x8, 0xfa00, {r8, 0x6}}, 0x10) (async) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {r4, 0x100, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x9, @local, 0x5}, @ib={0x1b, 0x6, 0x5, {"61b4bd5a2001c5bf952341464971e740"}, 0xfffffffffffffff9, 0x7fffffffffffffff, 0x6}}}, 0x118) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, 0x0, 0x0) (async) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a40), 0x220000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, &(0x7f0000000ac0)={0x0, 0x4, 0x2, &(0x7f0000000a80)=0x8}) ioctl$SG_BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000040)={'\x00', 0xdc, 0x3ff, 0x1, 0x1, 0x8, 0xffffffffffffffff}) 19:19:00 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0200ff000000fedbdf25030000000870890038b65ea6925031852da40000000000000002"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000440)) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ee66f509", @ANYRES16=r2, @ANYBLOB="000827bd7000fbdbdf25050000000800030005000000260002000700000008000200000000000800020006000000"], 0x34}, 0x1, 0x0, 0x0, 0x20040080}, 0x4040000) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x5, 0xffff0001, 0x2, 0x1111, 0xffffffffffffffff, 0x4, '\x00', 0x0, r3, 0x3, 0x1, 0x2, 0x4}, 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x8400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x40, 0x3, 0x3, 0x1000, r4, 0x4, '\x00', r5, r6, 0x5, 0x2, 0x3}, 0x48) 19:19:00 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) (async) connect$phonet_pipe(r1, &(0x7f0000000080)={0x23, 0x0, 0x1f, 0x2}, 0x10) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x38, 0x4) (async) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x203) 19:19:00 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000200)={0x0, 0x7fffffff, 0x0, &(0x7f00000001c0)=0xfb22}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000003000000060000000000000000000000060000000600000000000000050000000000000009000000000000000100000000000000000001000000000001000000000000000c000000000000000000000000000080030000000000000000000000100000000200000000000000000100000000000000000000000000000400000000000000ff7f0000000000000900000000000000"]) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000040)=0x62) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000180)={0x1, 0x7f, [{0x5, 0x0, 0x2}]}) 19:19:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), 0xffffffffffffffff, 0x3}}, 0x18) 19:19:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="74000000a066f48469d7a71a5d8c2e515f8997fda0c3cdf69885668773aeb5c99b", @ANYRES16, @ANYBLOB="00000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000e7f7998d000000000001000000000006001a004e2400000800180064cc7d09951f01010200000000000005000000ff"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x4}]}, 0x18}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000b00)) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x84, r4, 0x500, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x54, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x4014}, 0x4044) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), r1) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r5, 0x20, 0x8000000, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x14) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x24004001) sendmsg$NL802154_CMD_SET_CCA_MODE(r7, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x408c1}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r9, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r9, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004881) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="5506000074f6b9a0bbaef57bcad1807f8cee1cf56f56ff8ec3454c2354a7cda2267064a27835b4acd4273a29faa90481ac3c30fcc0d1b95ca42f8617077c6456251d4b1b53add59b0743de3bec263d13e15ae03d9ae81d9a96ba9c59cc1f900711c269ca7f88fe28ffa7c76a2c1bf9d92e9ae431819fbd510939ef8e836fbb581b2258acbabe3b9effcd46e60c4dec0ce2a9c668d31c38562bf6d4a43efc1f2d53f4a68a198a89198e857996bc584a58d3d321e52d6805b0a8e10df8ae8bba478f486dee159fac0930041c33b76f44840aa26071f635e3526cec5839cc6c8bc27d862ea2e6097442e31053f94592e634f0", @ANYRES16=r6, @ANYBLOB="020029bd7000fcdbdf250700000008000029010000050004000100000008001800ffff15ff05000d00000000000000000000000000000000ea7fed30977016b6b1046cd7fe095e3605ba7ab0b25a57cd09dfbc8e8fb7f71c260c363ae84c2b8a7c41c562ab7b9f18d75232de17f775227044e29b4e5fa600d6cfc5a47911556641a07b6d153c728aaaee33fc5180032b8c6a9c986910d53d775e9f47507e0df55265d37b01234352ed9cc1c167b9d4d6cbc9239739a5182993df826c499675efdb55635c712e2e146d97d2f2e99d7acce1f18750974bb0fa41d9e9961fb6d2062d83c568d25054a3dbcaf6cb97bf4822dc295afd5d5aa57c5f"], 0x3c}, 0x1, 0x0, 0x0, 0x8885}, 0x4000810) 19:19:00 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000200)={0x0, 0x7fffffff, 0x0, &(0x7f00000001c0)=0xfb22}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) (async) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000003000000060000000000000000000000060000000600000000000000050000000000000009000000000000000100000000000000000001000000000001000000000000000c000000000000000000000000000080030000000000000000000000100000000200000000000000000100000000000000000000000000000400000000000000ff7f0000000000000900000000000000"]) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000040)=0x62) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000180)={0x1, 0x7f, [{0x5, 0x0, 0x2}]}) 19:19:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), 0xffffffffffffffff, 0x3}}, 0x18) 19:19:00 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0200ff000000fedbdf25030000000870890038b65ea6925031852da40000000000000002"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) (async) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000440)) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ee66f509", @ANYRES16=r2, @ANYBLOB="000827bd7000fbdbdf25050000000800030005000000260002000700000008000200000000000800020006000000"], 0x34}, 0x1, 0x0, 0x0, 0x20040080}, 0x4040000) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x5, 0xffff0001, 0x2, 0x1111, 0xffffffffffffffff, 0x4, '\x00', 0x0, r3, 0x3, 0x1, 0x2, 0x4}, 0x48) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) (async) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x8400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x40, 0x3, 0x3, 0x1000, r4, 0x4, '\x00', r5, r6, 0x5, 0x2, 0x3}, 0x48) [ 894.698161] misc userio: No port type given on /dev/userio 19:19:00 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0), 0x106, 0x6}}, 0x20) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r5}}, 0x18) (async) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x1, {0x2, 0x0, "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", 0x1c, 0x4, 0x7, 0xe5, 0x40, 0x0, 0x3}, r5}}, 0x128) 19:19:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="74000000a066f48469d7a71a5d8c2e515f8997fda0c3cdf69885668773aeb5c99b", @ANYRES16, @ANYBLOB="00000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000e7f7998d000000000001000000000006001a004e2400000800180064cc7d09951f01010200000000000005000000ff"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x4}]}, 0x18}}, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000b00)) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x84, r4, 0x500, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x54, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x4014}, 0x4044) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), r1) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r5, 0x20, 0x8000000, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x14) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x24004001) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r7, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x408c1}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r9, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r9, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004881) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="5506000074f6b9a0bbaef57bcad1807f8cee1cf56f56ff8ec3454c2354a7cda2267064a27835b4acd4273a29faa90481ac3c30fcc0d1b95ca42f8617077c6456251d4b1b53add59b0743de3bec263d13e15ae03d9ae81d9a96ba9c59cc1f900711c269ca7f88fe28ffa7c76a2c1bf9d92e9ae431819fbd510939ef8e836fbb581b2258acbabe3b9effcd46e60c4dec0ce2a9c668d31c38562bf6d4a43efc1f2d53f4a68a198a89198e857996bc584a58d3d321e52d6805b0a8e10df8ae8bba478f486dee159fac0930041c33b76f44840aa26071f635e3526cec5839cc6c8bc27d862ea2e6097442e31053f94592e634f0", @ANYRES16=r6, @ANYBLOB="020029bd7000fcdbdf250700000008000029010000050004000100000008001800ffff15ff05000d00000000000000000000000000000000ea7fed30977016b6b1046cd7fe095e3605ba7ab0b25a57cd09dfbc8e8fb7f71c260c363ae84c2b8a7c41c562ab7b9f18d75232de17f775227044e29b4e5fa600d6cfc5a47911556641a07b6d153c728aaaee33fc5180032b8c6a9c986910d53d775e9f47507e0df55265d37b01234352ed9cc1c167b9d4d6cbc9239739a5182993df826c499675efdb55635c712e2e146d97d2f2e99d7acce1f18750974bb0fa41d9e9961fb6d2062d83c568d25054a3dbcaf6cb97bf4822dc295afd5d5aa57c5f"], 0x3c}, 0x1, 0x0, 0x0, 0x8885}, 0x4000810) 19:19:00 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000200)={0x0, 0x7fffffff, 0x0, &(0x7f00000001c0)=0xfb22}) (async) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000200)={0x0, 0x7fffffff, 0x0, &(0x7f00000001c0)=0xfb22}) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000003000000060000000000000000000000060000000600000000000000050000000000000009000000000000000100000000000000000001000000000001000000000000000c000000000000000000000000000080030000000000000000000000100000000200000000000000000100000000000000000000000000000400000000000000ff7f0000000000000900000000000000"]) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000040)=0x62) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000180)={0x1, 0x7f, [{0x5, 0x0, 0x2}]}) 19:19:00 executing program 4: ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)=ANY=[@ANYBLOB="55000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b1fa3e03f38f5e650c1181b00000000003dc44547112100"]) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f00000004c0)={0x2, 0x0, [{}, {}]}) (async) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f00000004c0)={0x2, 0x0, [{}, {}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r2}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r4, 0x5, "add1bc", "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"}}, 0x110) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r2}}, 0x10) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000640)={0xffffffffffffffff}, 0x2e, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000900)={0x5, 0x10, 0xfa00, {&(0x7f0000000700), r7, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000540)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000005c0)={0x7, 0x8, 0xfa00, {r8, 0x6}}, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {r4, 0x100, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x9, @local, 0x5}, @ib={0x1b, 0x6, 0x5, {"61b4bd5a2001c5bf952341464971e740"}, 0xfffffffffffffff9, 0x7fffffffffffffff, 0x6}}}, 0x118) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, 0x0, 0x0) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a40), 0x220000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, &(0x7f0000000ac0)={0x0, 0x4, 0x2, &(0x7f0000000a80)=0x8}) ioctl$SG_BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000040)={'\x00', 0xdc, 0x3ff, 0x1, 0x1, 0x8, 0xffffffffffffffff}) (async) ioctl$SG_BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000040)={'\x00', 0xdc, 0x3ff, 0x1, 0x1, 0x8, 0xffffffffffffffff}) 19:19:00 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0200ff000000fedbdf25030000000870890038b65ea6925031852da40000000000000002"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000440)) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ee66f509", @ANYRES16=r2, @ANYBLOB="000827bd7000fbdbdf25050000000800030005000000260002000700000008000200000000000800020006000000"], 0x34}, 0x1, 0x0, 0x0, 0x20040080}, 0x4040000) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x5, 0xffff0001, 0x2, 0x1111, 0xffffffffffffffff, 0x4, '\x00', 0x0, r3, 0x3, 0x1, 0x2, 0x4}, 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x8400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x40, 0x3, 0x3, 0x1000, r4, 0x4, '\x00', r5, r6, 0x5, 0x2, 0x3}, 0x48) 19:19:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), 0xffffffffffffffff, 0x3}}, 0x18) 19:19:00 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000eedd88161d951b0b7f1f7811686b6844b5a86387354306a81695d217f1237f33f607a3ddf7c8cc817e9188f1071f9a7535b6cc05f7660e758f27cd429001cf2f699ed44853a57509460d3cb5a50c852c13ec690a3fccf98f1a5db024678afd68f92e903154f46cf12fecb5e00fb12ccdebf7a6bde5457f78d532d69265965f1bebb98eeccf55baf97b83cff942", @ANYRES16=0x0, @ANYBLOB="000226bd7000fbdbdf250700000005000d0000000000050004001c00000014002000fe8000000000000000000000000000bb050022000000000006001b004e23000006001d000900000005001200b000000014001f00fe8000000000000000000000000000aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x8003) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) 19:19:00 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async, rerun: 32) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0), 0x106, 0x6}}, 0x20) (rerun: 32) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r5}}, 0x18) (async, rerun: 32) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x1, {0x2, 0x0, "1e46491fa537a42566f5b71c5f49380a595715aa835104ff7b9d1a55795793492c042f4cc6b777051e8e2595da59c3a7bf10a614183ee1290d37a077c465f552926e01b57648ffb0fb7c1387f88375e57a1eb6d34bb7ff3667dbf0622d1d1e8cb832b6e09731163060faee9f5edabf48c897aa57c6e2166eabd3c55bae8c3c2a41b8e1fa5b1170a9be3656dd85f40b928961f828ce111fb9ed70ddad7437a09191b6366ef5482d974e7e91d47f749cade3781404af62b33a8b07182ba502ac9c1bcb96f08bb23532b20dbfff344b228ea7751151c56ed5d0faf6f6970c8f8aabe13083a8cbfeb36f86d24e6ea632e5e4332c0342f233addfcc941410c1f955ad", 0x1c, 0x4, 0x7, 0xe5, 0x40, 0x0, 0x3}, r5}}, 0x128) (rerun: 32) 19:19:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), 0xffffffffffffffff, 0x3}}, 0x18) 19:19:00 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="74000000a066f48469d7a71a5d8c2e515f8997fda0c3cdf69885668773aeb5c99b", @ANYRES16, @ANYBLOB="00000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000e7f7998d000000000001000000000006001a004e2400000800180064cc7d09951f01010200000000000005000000ff"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x4}]}, 0x18}}, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000b00)) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x84, r4, 0x500, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x54, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x4014}, 0x4044) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), r1) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r5, 0x20, 0x8000000, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x14) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) (async, rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL802154_CMD_SET_CCA_MODE(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x24004001) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r7, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x408c1}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r9, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r9, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004881) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="5506000074f6b9a0bbaef57bcad1807f8cee1cf56f56ff8ec3454c2354a7cda2267064a27835b4acd4273a29faa90481ac3c30fcc0d1b95ca42f8617077c6456251d4b1b53add59b0743de3bec263d13e15ae03d9ae81d9a96ba9c59cc1f900711c269ca7f88fe28ffa7c76a2c1bf9d92e9ae431819fbd510939ef8e836fbb581b2258acbabe3b9effcd46e60c4dec0ce2a9c668d31c38562bf6d4a43efc1f2d53f4a68a198a89198e857996bc584a58d3d321e52d6805b0a8e10df8ae8bba478f486dee159fac0930041c33b76f44840aa26071f635e3526cec5839cc6c8bc27d862ea2e6097442e31053f94592e634f0", @ANYRES16=r6, @ANYBLOB="020029bd7000fcdbdf250700000008000029010000050004000100000008001800ffff15ff05000d00000000000000000000000000000000ea7fed30977016b6b1046cd7fe095e3605ba7ab0b25a57cd09dfbc8e8fb7f71c260c363ae84c2b8a7c41c562ab7b9f18d75232de17f775227044e29b4e5fa600d6cfc5a47911556641a07b6d153c728aaaee33fc5180032b8c6a9c986910d53d775e9f47507e0df55265d37b01234352ed9cc1c167b9d4d6cbc9239739a5182993df826c499675efdb55635c712e2e146d97d2f2e99d7acce1f18750974bb0fa41d9e9961fb6d2062d83c568d25054a3dbcaf6cb97bf4822dc295afd5d5aa57c5f"], 0x3c}, 0x1, 0x0, 0x0, 0x8885}, 0x4000810) 19:19:00 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000eedd88161d951b0b7f1f7811686b6844b5a86387354306a81695d217f1237f33f607a3ddf7c8cc817e9188f1071f9a7535b6cc05f7660e758f27cd429001cf2f699ed44853a57509460d3cb5a50c852c13ec690a3fccf98f1a5db024678afd68f92e903154f46cf12fecb5e00fb12ccdebf7a6bde5457f78d532d69265965f1bebb98eeccf55baf97b83cff942", @ANYRES16=0x0, @ANYBLOB="000226bd7000fbdbdf250700000005000d0000000000050004001c00000014002000fe8000000000000000000000000000bb050022000000000006001b004e23000006001d000900000005001200b000000014001f00fe8000000000000000000000000000aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x8003) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000eedd88161d951b0b7f1f7811686b6844b5a86387354306a81695d217f1237f33f607a3ddf7c8cc817e9188f1071f9a7535b6cc05f7660e758f27cd429001cf2f699ed44853a57509460d3cb5a50c852c13ec690a3fccf98f1a5db024678afd68f92e903154f46cf12fecb5e00fb12ccdebf7a6bde5457f78d532d69265965f1bebb98eeccf55baf97b83cff942", @ANYRES16=0x0, @ANYBLOB="000226bd7000fbdbdf250700000005000d0000000000050004001c00000014002000fe8000000000000000000000000000bb050022000000000006001b004e23000006001d000900000005001200b000000014001f00fe8000000000000000000000000000aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x8003) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) [ 894.883170] misc userio: No port type given on /dev/userio 19:19:00 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r1, 0x3}}, 0x18) 19:19:01 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000eedd88161d951b0b7f1f7811686b6844b5a86387354306a81695d217f1237f33f607a3ddf7c8cc817e9188f1071f9a7535b6cc05f7660e758f27cd429001cf2f699ed44853a57509460d3cb5a50c852c13ec690a3fccf98f1a5db024678afd68f92e903154f46cf12fecb5e00fb12ccdebf7a6bde5457f78d532d69265965f1bebb98eeccf55baf97b83cff942", @ANYRES16=0x0, @ANYBLOB="000226bd7000fbdbdf250700000005000d0000000000050004001c00000014002000fe8000000000000000000000000000bb050022000000000006001b004e23000006001d000900000005001200b000000014001f00fe8000000000000000000000000000aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x8003) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000eedd88161d951b0b7f1f7811686b6844b5a86387354306a81695d217f1237f33f607a3ddf7c8cc817e9188f1071f9a7535b6cc05f7660e758f27cd429001cf2f699ed44853a57509460d3cb5a50c852c13ec690a3fccf98f1a5db024678afd68f92e903154f46cf12fecb5e00fb12ccdebf7a6bde5457f78d532d69265965f1bebb98eeccf55baf97b83cff942", @ANYRES16=0x0, @ANYBLOB="000226bd7000fbdbdf250700000005000d0000000000050004001c00000014002000fe8000000000000000000000000000bb050022000000000006001b004e23000006001d000900000005001200b000000014001f00fe8000000000000000000000000000aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x8003) (async) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) (async) 19:19:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:01 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r1, 0x3}}, 0x18) [ 895.012205] misc userio: No port type given on /dev/userio 19:19:01 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x3) 19:19:01 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x4000000, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x100c80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) 19:19:01 executing program 1: ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010100}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffffffff}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xf8}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40801) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="000000007000ffdb050000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000010) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032bbd7000fddbdf2501000000060001000000000008001800e0000001060001000000000014000800766574683100000000000000000000000500140000000000050006001f000000566da11b8df9c7e4b5b3159329000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40480c4}, 0x400) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000f7ffdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f01010235ff763398a5b559ad23d0a378d85e9898ddfa79f031bae1186d4ad42697601633a21986b032d33ab5126be695195e90e7c74c11d0b6cb025c9360ee953e41a99662f51a498514852516be8dc0145d6ba67b7441b85e02f1d22d0ea95e04b039102131d8a7b58bd6d327269d6ef570f137d7df8d513595045d47103f7a14cfa8034add6b4ecfdb7b1666d379bdda"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:01 executing program 2: openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:01 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x3) 19:19:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r1, 0x3}}, 0x18) 19:19:01 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x3) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x3) (async) 19:19:01 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x161202, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000000c0)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:01 executing program 1: ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010100}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffffffff}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xf8}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40801) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="000000007000ffdb050000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000010) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="000000007000ffdb050000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000010) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032bbd7000fddbdf2501000000060001000000000008001800e0000001060001000000000014000800766574683100000000000000000000000500140000000000050006001f000000566da11b8df9c7e4b5b3159329000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40480c4}, 0x400) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000f7ffdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f01010235ff763398a5b559ad23d0a378d85e9898ddfa79f031bae1186d4ad42697601633a21986b032d33ab5126be695195e90e7c74c11d0b6cb025c9360ee953e41a99662f51a498514852516be8dc0145d6ba67b7441b85e02f1d22d0ea95e04b039102131d8a7b58bd6d327269d6ef570f137d7df8d513595045d47103f7a14cfa8034add6b4ecfdb7b1666d379bdda"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:01 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f00000000c0)) 19:19:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r1, 0x3}}, 0x18) [ 895.330942] misc userio: No port type given on /dev/userio 19:19:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r3, r4}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:01 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x4000000, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x100c80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) 19:19:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r1, 0x3}}, 0x18) 19:19:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r3, r4}}, 0x18) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:01 executing program 1: ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010100}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffffffff}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xf8}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40801) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="000000007000ffdb050000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000010) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032bbd7000fddbdf2501000000060001000000000008001800e0000001060001000000000014000800766574683100000000000000000000000500140000000000050006001f000000566da11b8df9c7e4b5b3159329000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40480c4}, 0x400) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000f7ffdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f01010235ff763398a5b559ad23d0a378d85e9898ddfa79f031bae1186d4ad42697601633a21986b032d33ab5126be695195e90e7c74c11d0b6cb025c9360ee953e41a99662f51a498514852516be8dc0145d6ba67b7441b85e02f1d22d0ea95e04b039102131d8a7b58bd6d327269d6ef570f137d7df8d513595045d47103f7a14cfa8034add6b4ecfdb7b1666d379bdda"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:01 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f00000000c0)) [ 895.431769] misc userio: No port type given on /dev/userio 19:19:01 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x161202, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000000c0)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:01 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x4000000, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x100c80, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) 19:19:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r1, 0x3}}, 0x18) 19:19:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x9, 0x4, 0x8}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r2, 0x2, 0xff, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 19:19:01 executing program 2: openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x161202, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000000c0)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:01 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000200)=0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) 19:19:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r3, r4}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:01 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f00000000c0)) (async) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f00000000c0)) 19:19:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) 19:19:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x9, 0x4, 0x8}) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r2, 0x2, 0xff, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) [ 895.637534] misc userio: No port type given on /dev/userio [ 895.646450] misc userio: No port type given on /dev/userio 19:19:01 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x14400, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x8, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) socket$inet_udp(0x2, 0x2, 0x0) 19:19:01 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xb0, 0x0, 0x80e, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x84, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40804}, 0x4008000) 19:19:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) 19:19:01 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000200)=0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) 19:19:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8048004}, 0x20040000) 19:19:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x9, 0x4, 0x8}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r2, 0x2, 0xff, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 19:19:01 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000200)=0x9) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) 19:19:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8048004}, 0x20040000) 19:19:01 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x14400, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x8, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) socket$inet_udp(0x2, 0x2, 0x0) 19:19:01 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xb0, 0x0, 0x80e, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x84, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40804}, 0x4008000) 19:19:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) [ 895.780283] misc userio: No port type given on /dev/userio 19:19:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8048004}, 0x20040000) 19:19:01 executing program 5: select(0x40, &(0x7f00000002c0)={0x0, 0x6, 0xfffffffffffffc01, 0x8dcd, 0x0, 0x7, 0x7, 0x7}, &(0x7f0000000300)={0x400, 0x100000001, 0x400, 0x0, 0xffffffffffffffff, 0x81, 0xf3, 0x80000001}, &(0x7f0000000340)={0x8796, 0x8000000000000000, 0xffffffffffffff81, 0xfd49, 0x5, 0x3, 0x4, 0x40}, &(0x7f0000000380)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000280)={0xf, 0x8, 0xfa00, {r1, 0x11}}, 0x10) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYRES32], 0x44}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:01 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x14400, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x8, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) socket$inet_udp(0x2, 0x2, 0x0) 19:19:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {0x0, r1, 0x3}}, 0x18) 19:19:01 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xb0, 0x0, 0x80e, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x84, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40804}, 0x4008000) [ 895.894428] misc userio: No port type given on /dev/userio 19:19:01 executing program 5: select(0x40, &(0x7f00000002c0)={0x0, 0x6, 0xfffffffffffffc01, 0x8dcd, 0x0, 0x7, 0x7, 0x7}, &(0x7f0000000300)={0x400, 0x100000001, 0x400, 0x0, 0xffffffffffffffff, 0x81, 0xf3, 0x80000001}, &(0x7f0000000340)={0x8796, 0x8000000000000000, 0xffffffffffffff81, 0xfd49, 0x5, 0x3, 0x4, 0x40}, &(0x7f0000000380)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) (async, rerun: 32) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (rerun: 32) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000280)={0xf, 0x8, 0xfa00, {r1, 0x11}}, 0x10) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x106, 0x2}}, 0x20) (async, rerun: 32) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYRES32], 0x44}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:01 executing program 0: ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000700)={[0x100, 0xd6, 0x4, 0x1, 0x9, 0x6, 0x3ff, 0x3f, 0x5, 0xfffffffffffffff7, 0x1f2, 0x0, 0x1000, 0x40, 0x4], 0x1000, 0x29e801}) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f00000000c0)) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000180)={"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"}) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r1 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80802, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000140)={&(0x7f00000007c0)="6c0905f4613633a55a4ed9a3e60b34818ed982310941e05c4bcae97a368e8ea988e5d9dd0c73dbd49463914d7f40d74ef853502a45c4afbfab1f14e3e903aa6bb2fa7a793ac1db1317ce439315b5ee57a6275a7ec865b23bf57e0354ed87bc6968e03e1669e200f042f2413e576ad7ca99e3ac137f8df10313575e4387410d7419197f4848354264c8b8ab227767fe9c912bab7a606f17a173f31fc7892d7a38121a025a4f001c045fe92cfd4a87f42accbbd67fa83961e7643596b2db07baaa4f1c71c481eed5e5184dc30d1f168c19a99a95330709883b", 0xd8}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000580)={[0xd79, 0x7ffffff5, 0x8000000000000001, 0x9, 0x4000131, 0x4, 0x9, 0x2, 0x3, 0x6, 0x7, 0x40, 0x8000000000000000, 0x4000000000006, 0x100000000401, 0xfffffffffffffefe], 0x5000, 0x5003}) 19:19:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) 19:19:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYRES32], 0x44}}, 0x0) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:02 executing program 0: ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000700)={[0x100, 0xd6, 0x4, 0x1, 0x9, 0x6, 0x3ff, 0x3f, 0x5, 0xfffffffffffffff7, 0x1f2, 0x0, 0x1000, 0x40, 0x4], 0x1000, 0x29e801}) (async) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f00000000c0)) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) (async) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000180)={"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"}) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r1 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80802, 0x0) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000140)={&(0x7f00000007c0)="6c0905f4613633a55a4ed9a3e60b34818ed982310941e05c4bcae97a368e8ea988e5d9dd0c73dbd49463914d7f40d74ef853502a45c4afbfab1f14e3e903aa6bb2fa7a793ac1db1317ce439315b5ee57a6275a7ec865b23bf57e0354ed87bc6968e03e1669e200f042f2413e576ad7ca99e3ac137f8df10313575e4387410d7419197f4848354264c8b8ab227767fe9c912bab7a606f17a173f31fc7892d7a38121a025a4f001c045fe92cfd4a87f42accbbd67fa83961e7643596b2db07baaa4f1c71c481eed5e5184dc30d1f168c19a99a95330709883b", 0xd8}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000580)={[0xd79, 0x7ffffff5, 0x8000000000000001, 0x9, 0x4000131, 0x4, 0x9, 0x2, 0x3, 0x6, 0x7, 0x40, 0x8000000000000000, 0x4000000000006, 0x100000000401, 0xfffffffffffffefe], 0x5000, 0x5003}) 19:19:02 executing program 5: select(0x40, &(0x7f00000002c0)={0x0, 0x6, 0xfffffffffffffc01, 0x8dcd, 0x0, 0x7, 0x7, 0x7}, &(0x7f0000000300)={0x400, 0x100000001, 0x400, 0x0, 0xffffffffffffffff, 0x81, 0xf3, 0x80000001}, &(0x7f0000000340)={0x8796, 0x8000000000000000, 0xffffffffffffff81, 0xfd49, 0x5, 0x3, 0x4, 0x40}, &(0x7f0000000380)) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) (async, rerun: 64) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (rerun: 64) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000280)={0xf, 0x8, 0xfa00, {r1, 0x11}}, 0x10) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x106, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYRES32], 0x44}}, 0x0) ioctl$SG_BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000380)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYRES32], 0x44}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x1dc, r8, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x1b0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0xe8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xcc443c364ef387c9}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x60, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100}]}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1031}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4001}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x54}}, 0x4048045) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000dc0)={0x118, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x28, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xcbcf}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x74, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x40, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffaa25}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x200}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r12, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="200000000f221b82aab81b59a3c4f1cf8ff557b0c064e77eafda83acaedee66b0961a52819a0246af9fdd0d73d23c986a3fcc8fb86a4645c9f7d5557b25c05bf13d7f453ea3f302b77aa8a4edda387e9d100163105c8", @ANYRES16=r4, @ANYBLOB="00012dbd7000fddbdf2516f30080ff07000009000100f4000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYRES32], 0x44}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r13, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x84}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008d1}, 0x800) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000ac0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0xc054) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:02 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x3f}, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000080)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @ib={0x1b, 0xffff, 0x1, {"30c0c2c444d65d93e1702f15952bda1c"}, 0x78b1a54, 0x8000000000000001, 0x3f}, @in={0x2, 0x4e24, @multicast1}}}, 0x118) [ 896.040675] misc userio: No port type given on /dev/userio 19:19:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) 19:19:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064f2eacc7d09951f01010294d58591f7c8955c7f47c86e8939c7fde4b962e5d34f3a439ddd3451f7e0f1340304aaa6123f27dc0954cc7ad4b3db3e2e", @ANYRES32=r0, @ANYRES32=r1, @ANYRES64=r2], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:02 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000200)={"4153b8b362a589f15602037152e3f1cb8f50ca116134fbd31499ce5f184eff647d7e9c2913a221c507f13464056554eff891d8656b37c9acbf53b1b7f07cb9c538694594a36df1c659abac19d0d76aeb956c63269d440dfe5445485302503509445353761ca413cc7e8dfd60ae9675c7facff3acda02e197db6e6bb8bc05d97b27f2c211953b46eb8722ad9c35c65827bbfa20edb8f1e98c393c3dfe0e2e5e0a972e1660371ef3641be1c8772a588568b543be0cadb4f4c25172c9dd5aaedb1484718ad5950915567a6fb4eb7206c5e049ce1afb1ba0b63d0eb8719255921d0342180daab34463b2e87882f8f43c3f30be550ec9b88d6ecb900abe719ad66780d50485bdec66a259952eb4c5fe47601a570772da5d7fccc81ebb5a0d489a1ad9e86c6c0e79814dfcfd7baf9099a4758070952c8c2a14f93197637c9223fc234934ba4bdb65cb8593e2f2edab08eaad3ec6b3ad42b004fb5d13953f019bbd8710475c2dc6d9cb8cd1b9c7e1ca851e454b66be2f92bc79bec7bd0d83c7a320bfc3a56bfa6a23592087f229f4d44f99815105ef7c807447afbee3318f2dfc836315146386be50e418a02490c0f8c3bf9bb417a8fc693ac5e872c6b352c89bd4eaaf322b63cff7116d36fe0fed6fe96fd862db8f9310ea6e1052b68e31242f16b5affaae23b3bdd0fed4f57bbbc9cff023e36a74cb14a5f3d72a501b2961b5bf99ba097d324ce5a64b492785a40b85051d7c6f01f5b41cd74fc2f01922c0d855da1f8a287a5b83d061da5d96f5298ce568d47c2dfb25852bada3b32ae4a98eb3881121dedba1cb7b2fc2ed82adc8185894dfd2b5b9073c38ed5ca360a06b3c9e99b3086db0f7860a91ec8799727c5700db7299ebe907c6464803ba6f5e09dff59aadae23cc226273c035f9252fdc34a629760bd8786fe3d259619030a062c615f22dfd1fc054ea60dc1c2109ced33bfad7a85de9092e1252354ea969e4136fdf64ae819535fac9e95c5e3ac182467576d6cb470e6270cddc1647b22601af817eab1e4e63b141ac1f34687a72895112e7089f3c33ea61b2cbff5ddf8caad22a070e17488555938ccf4c5d93065ee86e62738e7c5aeffc2a3f55265eacf72ee01a0e32d2ea70a9a08fdd14a23ae73cbbf4f5915d99e0ecedd9637fde9fae03d43f29cb8665a67d1e7a68edd3727ff2734740f6ddb1e8991365519743c387338605be373968e36dcc3a804d76fa6712459a1d667b27290a04cfa5abc57005df8ad082286f976799985febbd842b048a950a0994df458749b58570e37e2ddf7ab89a72ae0aedcb651aebbd06a057e34da4771aee8a10b4ff55851d642d6965fb9a14c6647a16b0ebf897707a99102814a62b5823753fa3b9c26d091b22b244a6fa504802d0b10ecae326885cde00"}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000600)=0x3f) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:02 executing program 0: ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000700)={[0x100, 0xd6, 0x4, 0x1, 0x9, 0x6, 0x3ff, 0x3f, 0x5, 0xfffffffffffffff7, 0x1f2, 0x0, 0x1000, 0x40, 0x4], 0x1000, 0x29e801}) (async) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f00000000c0)) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000180)={"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"}) (async, rerun: 64) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async, rerun: 64) r1 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80802, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000140)={&(0x7f00000007c0)="6c0905f4613633a55a4ed9a3e60b34818ed982310941e05c4bcae97a368e8ea988e5d9dd0c73dbd49463914d7f40d74ef853502a45c4afbfab1f14e3e903aa6bb2fa7a793ac1db1317ce439315b5ee57a6275a7ec865b23bf57e0354ed87bc6968e03e1669e200f042f2413e576ad7ca99e3ac137f8df10313575e4387410d7419197f4848354264c8b8ab227767fe9c912bab7a606f17a173f31fc7892d7a38121a025a4f001c045fe92cfd4a87f42accbbd67fa83961e7643596b2db07baaa4f1c71c481eed5e5184dc30d1f168c19a99a95330709883b", 0xd8}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000580)={[0xd79, 0x7ffffff5, 0x8000000000000001, 0x9, 0x4000131, 0x4, 0x9, 0x2, 0x3, 0x6, 0x7, 0x40, 0x8000000000000000, 0x4000000000006, 0x100000000401, 0xfffffffffffffefe], 0x5000, 0x5003}) 19:19:02 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x3f}, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000080)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @ib={0x1b, 0xffff, 0x1, {"30c0c2c444d65d93e1702f15952bda1c"}, 0x78b1a54, 0x8000000000000001, 0x3f}, @in={0x2, 0x4e24, @multicast1}}}, 0x118) 19:19:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) [ 896.136346] misc userio: No port type given on /dev/userio 19:19:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064f2eacc7d09951f01010294d58591f7c8955c7f47c86e8939c7fde4b962e5d34f3a439ddd3451f7e0f1340304aaa6123f27dc0954cc7ad4b3db3e2e", @ANYRES32=r0, @ANYRES32=r1, @ANYRES64=r2], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:02 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000200)={"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"}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000600)=0x3f) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYRES32], 0x44}}, 0x0) ioctl$SG_BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000380)) (async) ioctl$SG_BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000380)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYRES32], 0x44}}, 0x0) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYRES32], 0x44}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x1dc, r8, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x1b0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0xe8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xcc443c364ef387c9}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x60, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100}]}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1031}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4001}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x54}}, 0x4048045) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x54}}, 0x4048045) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000dc0)={0x118, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x28, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xcbcf}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x74, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x40, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffaa25}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x200}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r12, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="200000000f221b82aab81b59a3c4f1cf8ff557b0c064e77eafda83acaedee66b0961a52819a0246af9fdd0d73d23c986a3fcc8fb86a4645c9f7d5557b25c05bf13d7f453ea3f302b77aa8a4edda387e9d100163105c8", @ANYRES16=r4, @ANYBLOB="00012dbd7000fddbdf2516f30080ff07000009000100f4000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r12, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="200000000f221b82aab81b59a3c4f1cf8ff557b0c064e77eafda83acaedee66b0961a52819a0246af9fdd0d73d23c986a3fcc8fb86a4645c9f7d5557b25c05bf13d7f453ea3f302b77aa8a4edda387e9d100163105c8", @ANYRES16=r4, @ANYBLOB="00012dbd7000fddbdf2516f30080ff07000009000100f4000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYRES32], 0x44}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r13, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x84}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008d1}, 0x800) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000ac0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0xc054) (async) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0xc054) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:02 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x109183) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000100)={0x0, 0x40}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000140)=0xffff, &(0x7f0000000180)=0x2) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={0x1, 0x54, &(0x7f0000000040)=""/84}) 19:19:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {0x0, r1}}, 0x18) 19:19:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064f2eacc7d09951f01010294d58591f7c8955c7f47c86e8939c7fde4b962e5d34f3a439ddd3451f7e0f1340304aaa6123f27dc0954cc7ad4b3db3e2e", @ANYRES32=r0, @ANYRES32=r1, @ANYRES64=r2], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:02 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x109183) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) (async) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000100)={0x0, 0x40}) (async) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000140)=0xffff, &(0x7f0000000180)=0x2) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={0x1, 0x54, &(0x7f0000000040)=""/84}) [ 896.268296] misc userio: No port type given on /dev/userio 19:19:02 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x3f}, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000080)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @ib={0x1b, 0xffff, 0x1, {"30c0c2c444d65d93e1702f15952bda1c"}, 0x78b1a54, 0x8000000000000001, 0x3f}, @in={0x2, 0x4e24, @multicast1}}}, 0x118) openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x3f}, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000080)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @ib={0x1b, 0xffff, 0x1, {"30c0c2c444d65d93e1702f15952bda1c"}, 0x78b1a54, 0x8000000000000001, 0x3f}, @in={0x2, 0x4e24, @multicast1}}}, 0x118) (async) 19:19:02 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000200)={"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"}) (async) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000600)=0x3f) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000280)) 19:19:02 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x109183) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000100)={0x0, 0x40}) (async, rerun: 32) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000140)=0xffff, &(0x7f0000000180)=0x2) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={0x1, 0x54, &(0x7f0000000040)=""/84}) 19:19:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {0x0, r1}}, 0x18) 19:19:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYRES32], 0x44}}, 0x0) (async) ioctl$SG_BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000380)) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYRES32], 0x44}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x1dc, r8, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x1b0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0xe8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xcc443c364ef387c9}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x60, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100}]}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1031}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4001}, 0x800) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x54}}, 0x4048045) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000dc0)={0x118, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x28, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xcbcf}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x74, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x40, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffaa25}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x200}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r12, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="200000000f221b82aab81b59a3c4f1cf8ff557b0c064e77eafda83acaedee66b0961a52819a0246af9fdd0d73d23c986a3fcc8fb86a4645c9f7d5557b25c05bf13d7f453ea3f302b77aa8a4edda387e9d100163105c8", @ANYRES16=r4, @ANYBLOB="00012dbd7000fddbdf2516f30080ff07000009000100f4000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) (async) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYRES32], 0x44}}, 0x0) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r13, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x84}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008d1}, 0x800) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) (async) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000ac0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0xc054) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:02 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) syz_open_dev$media(&(0x7f0000000040), 0x1, 0x4880) 19:19:02 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x101001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r4}}, 0x18) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000480)=0x2) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=r7, @ANYBLOB="080025bd7000fedbdf250700000006001c0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x240458c5}, 0x800) 19:19:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000280)) [ 896.416713] misc userio: No port type given on /dev/userio [ 896.435652] misc userio: No port type given on /dev/userio 19:19:02 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x7fff}}, 0x10) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)={"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"}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x100000f, 0x13, r1, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)) 19:19:02 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x3f}, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000080)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @ib={0x1b, 0xffff, 0x1, {"30c0c2c444d65d93e1702f15952bda1c"}, 0x78b1a54, 0x8000000000000001, 0x3f}, @in={0x2, 0x4e24, @multicast1}}}, 0x118) 19:19:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000280)) (async) 19:19:02 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x101001, 0x0) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x101001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x111, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r4}}, 0x18) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000480)=0x2) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=r7, @ANYBLOB="080025bd7000fedbdf250700000006001c0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x240458c5}, 0x800) 19:19:02 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) syz_open_dev$media(&(0x7f0000000040), 0x1, 0x4880) openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) syz_open_dev$media(&(0x7f0000000040), 0x1, 0x4880) (async) 19:19:02 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x7fff}}, 0x10) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)={"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"}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x100000f, 0x13, r1, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x7fff}}, 0x10) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)={"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"}) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x100000f, 0x13, r1, 0x0) (async) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)) (async) 19:19:02 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) syz_open_dev$media(&(0x7f0000000040), 0x1, 0x4880) [ 896.543716] misc userio: No port type given on /dev/userio [ 896.567601] misc userio: No port type given on /dev/userio 19:19:02 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x101001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r4}}, 0x18) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000480)=0x2) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=r7, @ANYBLOB="080025bd7000fedbdf250700000006001c0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x240458c5}, 0x800) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x13f}}, 0x20) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x101001, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x111, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r4}}, 0x18) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x0) (async) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000480)=0x2) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=r7, @ANYBLOB="080025bd7000fedbdf250700000006001c0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x240458c5}, 0x800) (async) 19:19:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x80000) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000080)) 19:19:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000001c0)={&(0x7f0000000400), 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f25df249ec33f8ab88a7c08b200000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000007a180f661fb74700ee0684132d911c920021000000000000000c0001000000000001338700000006001a004e"], 0x74}, 0x1, 0x0, 0x0, 0x24004054}, 0x4040800) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x20, &(0x7f0000000040)=0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x44}}, 0x4048000) [ 896.629087] misc userio: No port type given on /dev/userio [ 896.667007] misc userio: No port type given on /dev/userio 19:19:02 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x7fff}}, 0x10) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)={"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"}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x100000f, 0x13, r1, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)) 19:19:02 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) 19:19:02 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x80000) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000080)) (async) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000080)) 19:19:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8048004}, 0x20040000) 19:19:02 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) syz_open_dev$media(&(0x7f0000000040), 0x1, 0x4880) [ 896.699004] misc userio: No port type given on /dev/userio 19:19:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYRES32], 0x44}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r1, 0x22, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000000) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, &(0x7f0000000ac0)) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000040), &(0x7f00000000c0)=0x1) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) 19:19:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000001c0)={&(0x7f0000000400), 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f25df249ec33f8ab88a7c08b200000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000007a180f661fb74700ee0684132d911c920021000000000000000c0001000000000001338700000006001a004e"], 0x74}, 0x1, 0x0, 0x0, 0x24004054}, 0x4040800) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x20, &(0x7f0000000040)=0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x44}}, 0x4048000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) connect$phonet_pipe(r1, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000001c0)={&(0x7f0000000400), 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f25df249ec33f8ab88a7c08b200000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000007a180f661fb74700ee0684132d911c920021000000000000000c0001000000000001338700000006001a004e"], 0x74}, 0x1, 0x0, 0x0, 0x24004054}, 0x4040800) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) (async) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x20, &(0x7f0000000040)=0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x44}}, 0x4048000) (async) 19:19:02 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) 19:19:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x80000) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000080)) (async) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000080)) 19:19:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8048004}, 0x20040000) [ 896.843277] misc userio: No port type given on /dev/userio 19:19:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYRES32], 0x44}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r1, 0x22, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000000) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, &(0x7f0000000ac0)) (async, rerun: 64) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000040), &(0x7f00000000c0)=0x1) (rerun: 64) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) 19:19:02 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) 19:19:02 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000180)=""/122) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000200)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000040)={0xffffffffffffffff, 0x8, {0x0, 0x0, 0x0, 0x5, 0x1f, 0x0, 0x12, 0xe, 0xc, "d4e18f03195e8b7d42f13aa6f5a5e6800531cb6da614d4bbc38de38a0e08ae89137643a04fcf820b3385b454495f5852d4e645bad9e2f19de79ddfef637509a2", "ef3b70e712d1829bd99b98908d3859dbdbf6193dfe19e986796a429642fe5b46a8732196c65ebd8900fb3557cef7dd0b59a559ad4bbfe3f1631221c728b9d52a", "2bf0169416e6cd6b81bebdf244a51a065d3f683a667be7b4164ed0132392263b", [0x20, 0x1]}}) 19:19:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x502, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x1, r3, 0x0, 0x0, 0x1}}, 0x20) [ 896.890279] misc userio: No port type given on /dev/userio 19:19:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000001c0)={&(0x7f0000000400), 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f25df249ec33f8ab88a7c08b200000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000007a180f661fb74700ee0684132d911c920021000000000000000c0001000000000001338700000006001a004e"], 0x74}, 0x1, 0x0, 0x0, 0x24004054}, 0x4040800) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) (async) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x20, &(0x7f0000000040)=0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x44}}, 0x4048000) (rerun: 64) 19:19:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8048004}, 0x20040000) 19:19:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYRES32], 0x44}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r1, 0x22, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000000) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, &(0x7f0000000ac0)) (async) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000040), &(0x7f00000000c0)=0x1) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) 19:19:03 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x502, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f, 0xa}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x1, r3, 0x0, 0x0, 0x1}}, 0x20) [ 897.027599] misc userio: No port type given on /dev/userio 19:19:03 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000180)=""/122) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000200)) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000040)={0xffffffffffffffff, 0x8, {0x0, 0x0, 0x0, 0x5, 0x1f, 0x0, 0x12, 0xe, 0xc, "d4e18f03195e8b7d42f13aa6f5a5e6800531cb6da614d4bbc38de38a0e08ae89137643a04fcf820b3385b454495f5852d4e645bad9e2f19de79ddfef637509a2", "ef3b70e712d1829bd99b98908d3859dbdbf6193dfe19e986796a429642fe5b46a8732196c65ebd8900fb3557cef7dd0b59a559ad4bbfe3f1631221c728b9d52a", "2bf0169416e6cd6b81bebdf244a51a065d3f683a667be7b4164ed0132392263b", [0x20, 0x1]}}) 19:19:03 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x10000, 0x3) 19:19:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) 19:19:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44004095}, 0x4894) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000011}, 0x8000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x5381) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:03 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x502, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x1, r3, 0x0, 0x0, 0x1}}, 0x20) 19:19:03 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:03 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x10000, 0x3) 19:19:03 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000180)=""/122) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000200)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000040)={0xffffffffffffffff, 0x8, {0x0, 0x0, 0x0, 0x5, 0x1f, 0x0, 0x12, 0xe, 0xc, "d4e18f03195e8b7d42f13aa6f5a5e6800531cb6da614d4bbc38de38a0e08ae89137643a04fcf820b3385b454495f5852d4e645bad9e2f19de79ddfef637509a2", "ef3b70e712d1829bd99b98908d3859dbdbf6193dfe19e986796a429642fe5b46a8732196c65ebd8900fb3557cef7dd0b59a559ad4bbfe3f1631221c728b9d52a", "2bf0169416e6cd6b81bebdf244a51a065d3f683a667be7b4164ed0132392263b", [0x20, 0x1]}}) 19:19:03 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x10000, 0x3) 19:19:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44004095}, 0x4894) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000011}, 0x8000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x5381) (async) ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x5381) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) [ 897.195202] misc userio: No port type given on /dev/userio 19:19:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x200040, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x16, 0xfa00, {0x0, {0xa, 0x4e25, 0x10000, @mcast2, 0x8004}, r2}}, 0x30) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000100)=0x1ff, &(0x7f0000000180)=0x2) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 19:19:03 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:03 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x3) 19:19:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44004095}, 0x4894) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000011}, 0x8000) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x5381) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) 19:19:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x200040, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x16, 0xfa00, {0x0, {0xa, 0x4e25, 0x10000, @mcast2, 0x8004}, r2}}, 0x30) (async) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000100)=0x1ff, &(0x7f0000000180)=0x2) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 897.294293] misc userio: No port type given on /dev/userio [ 897.329297] misc userio: No port type given on /dev/userio 19:19:03 executing program 2: openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000000ac0)) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x8, 0xcb}, 0x2) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xca880, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040), 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000180), 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000), 0x2) 19:19:03 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x3) 19:19:03 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f00000001c0)={0xa, 0x8, 0x6}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) 19:19:03 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x200040, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x16, 0xfa00, {0x0, {0xa, 0x4e25, 0x10000, @mcast2, 0x8004}, r2}}, 0x30) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000100)=0x1ff, &(0x7f0000000180)=0x2) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r2}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x200040, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x16, 0xfa00, {0x0, {0xa, 0x4e25, 0x10000, @mcast2, 0x8004}, r2}}, 0x30) (async) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000100)=0x1ff, &(0x7f0000000180)=0x2) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r2}}, 0x10) (async) 19:19:03 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x3) 19:19:03 executing program 2: openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000000ac0)) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x8, 0xcb}, 0x2) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xca880, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040), 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000180), 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000), 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000000ac0)) (async) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x8, 0xcb}, 0x2) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xca880, 0x0) (async) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040), 0x2) (async) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000180), 0x2) (async) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000), 0x2) (async) 19:19:03 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) (async) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f00000001c0)={0xa, 0x8, 0x6}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:03 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:03 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:03 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x17, 0x8b, &(0x7f00000000c0)="5c56e0a788f063a4d281e3157fef1f036a4d6e5bde10c1d79dba73b49914780f040b7100b4d697bc91cdcb0d3315b3899ae45ed039a73f6f1d9ed245bb34bba7e2c19d0b380902cd710eadfe7b04a94d1a4b4161c6feff194a8175ba870a15c441e29205f12b955d2cf2e649d6654a8b413500328e8cace66f26076edb4ec12e1dc4571cea92a4e2406d0d"}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0x39) 19:19:03 executing program 2: openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000000ac0)) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x8, 0xcb}, 0x2) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xca880, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040), 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000180), 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000), 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000000ac0)) (async) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x8, 0xcb}, 0x2) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xca880, 0x0) (async) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040), 0x2) (async) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000180), 0x2) (async) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000), 0x2) (async) 19:19:03 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f00000001c0)={0xa, 0x8, 0x6}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) (async) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f00000001c0)={0xa, 0x8, 0x6}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) (async) 19:19:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, &(0x7f0000000ac0)) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0x1, 0x1) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:03 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x17, 0x8b, &(0x7f00000000c0)="5c56e0a788f063a4d281e3157fef1f036a4d6e5bde10c1d79dba73b49914780f040b7100b4d697bc91cdcb0d3315b3899ae45ed039a73f6f1d9ed245bb34bba7e2c19d0b380902cd710eadfe7b04a94d1a4b4161c6feff194a8175ba870a15c441e29205f12b955d2cf2e649d6654a8b413500328e8cace66f26076edb4ec12e1dc4571cea92a4e2406d0d"}) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0x39) 19:19:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x106, 0x8}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:03 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000002c0)={0x80000000, &(0x7f0000000200), &(0x7f0000000240)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000500)={r2, &(0x7f0000000300), &(0x7f0000000340)}) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000400), 0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000008c0)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) accept$phonet_pipe(r1, &(0x7f0000000480), &(0x7f00000004c0)=0x10) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x4004014) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r4}}, 0x128) 19:19:03 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x8181, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, &(0x7f0000000ac0)) (async) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0x1, 0x1) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:03 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x17, 0x8b, &(0x7f00000000c0)="5c56e0a788f063a4d281e3157fef1f036a4d6e5bde10c1d79dba73b49914780f040b7100b4d697bc91cdcb0d3315b3899ae45ed039a73f6f1d9ed245bb34bba7e2c19d0b380902cd710eadfe7b04a94d1a4b4161c6feff194a8175ba870a15c441e29205f12b955d2cf2e649d6654a8b413500328e8cace66f26076edb4ec12e1dc4571cea92a4e2406d0d"}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0x39) 19:19:03 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) (async) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000002c0)={0x80000000, &(0x7f0000000200), &(0x7f0000000240)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000500)={r2, &(0x7f0000000300), &(0x7f0000000340)}) (async) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000400), 0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000008c0)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) (async) accept$phonet_pipe(r1, &(0x7f0000000480), &(0x7f00000004c0)=0x10) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x4004014) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000440)) (async) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r4}}, 0x128) 19:19:03 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x8181, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, &(0x7f0000000ac0)) (async, rerun: 64) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0x1, 0x1) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x106, 0x8}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (async) [ 897.805727] misc userio: No port type given on /dev/userio 19:19:03 executing program 0: syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000080), 0x4000, 0x3) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0xcd, 0x80800) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0x88) 19:19:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:03 executing program 2: openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x8181, 0x0) (async) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x8181, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x50, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f0000000280)) [ 897.912537] misc userio: No port type given on /dev/userio 19:19:03 executing program 0: syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000080), 0x4000, 0x3) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0xcd, 0x80800) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0x88) 19:19:03 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000002c0)={0x80000000, &(0x7f0000000200), &(0x7f0000000240)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000500)={r2, &(0x7f0000000300), &(0x7f0000000340)}) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000400), 0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000008c0)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) accept$phonet_pipe(r1, &(0x7f0000000480), &(0x7f00000004c0)=0x10) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x4004014) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r4}}, 0x128) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) syz_open_dev$loop(0x0, 0x0, 0x0) (async) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000002c0)={0x80000000, &(0x7f0000000200), &(0x7f0000000240)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000500)={r2, &(0x7f0000000300), &(0x7f0000000340)}) (async) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000400), 0x4) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) (async) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000008c0)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) accept$phonet_pipe(r1, &(0x7f0000000480), &(0x7f00000004c0)=0x10) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x4004014) (async) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000440)) (async) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r4}}, 0x128) (async) 19:19:04 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000280), r1}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r4, 0x2, 0xff, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r7}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000740)={0x8, 0x120, 0xfa00, {0x1, {0x0, 0x3, "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", 0x25, 0x81, 0xc5, 0x1, 0x9, 0x8, 0x2, 0x1}, r7}}, 0x128) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, 0x0, &(0x7f0000000ac0)) connect$bt_sco(r8, &(0x7f0000000880), 0x8) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000228bd7000fddbdf2502003d8643000004000180080003000400000008000300040000000800020000000000000000000300000014000114bb000000310000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20041010}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r9, 0x2, 0xff, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r9, 0x4, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 19:19:04 executing program 0: syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000080), 0x4000, 0x3) (async) syz_open_dev$loop(&(0x7f0000000080), 0x4000, 0x3) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0xcd, 0x80800) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0x88) 19:19:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x50, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x50, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) (async) connect$phonet_pipe(r4, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) (async) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f0000000280)) 19:19:04 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x4, {0x6, 0x25c2, "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", 0x8, 0x8, 0x3, 0x1, 0x4, 0x80, 0x3f, 0x1}, r3}}, 0x128) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {r1, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f0000000240)) 19:19:04 executing program 0: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000080)=0x312a, 0x4) 19:19:04 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x20002) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000080)=0x7) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000100)=0x3f) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000000c0)=0x422) [ 898.064527] misc userio: No port type given on /dev/userio 19:19:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8}, 0x10) 19:19:04 executing program 0: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000080)=0x312a, 0x4) 19:19:04 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x50, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x50, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) (async) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f0000000280)) [ 898.170896] misc userio: No port type given on /dev/userio 19:19:04 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x20002) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000080)=0x7) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async, rerun: 64) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000100)=0x3f) (async, rerun: 64) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) (async) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000000c0)=0x422) 19:19:04 executing program 0: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000080)=0x312a, 0x4) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000080)=0x312a, 0x4) (async) [ 898.288724] misc userio: No port type given on /dev/userio 19:19:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8}, 0x10) 19:19:04 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x4, {0x6, 0x25c2, "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", 0x8, 0x8, 0x3, 0x1, 0x4, 0x80, 0x3f, 0x1}, r3}}, 0x128) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {r1, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f0000000240)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x2, 0x5}}, 0x20) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x4, {0x6, 0x25c2, "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", 0x8, 0x8, 0x3, 0x1, 0x4, 0x80, 0x3f, 0x1}, r3}}, 0x128) (async) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {r1, 0x1}}, 0x10) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f0000000240)) (async) 19:19:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0xa8, 0x8000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:04 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x1, 0x3) 19:19:04 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000280), r1}}, 0x18) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r4, 0x2, 0xff, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r7}}, 0x18) (async) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000740)={0x8, 0x120, 0xfa00, {0x1, {0x0, 0x3, "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", 0x25, 0x81, 0xc5, 0x1, 0x9, 0x8, 0x2, 0x1}, r7}}, 0x128) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, 0x0, &(0x7f0000000ac0)) connect$bt_sco(r8, &(0x7f0000000880), 0x8) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000228bd7000fddbdf2502003d8643000004000180080003000400000008000300040000000800020000000000000000000300000014000114bb000000310000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20041010}, 0x0) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r9, 0x2, 0xff, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r9, 0x4, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 19:19:04 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x20002) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000080)=0x7) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000100)=0x3f) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000000c0)=0x422) openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x20002) (async) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000080)=0x7) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000100)=0x3f) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) (async) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000000c0)=0x422) (async) 19:19:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0xa8, 0x8000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) syz_open_dev$sg(&(0x7f0000000000), 0xa8, 0x8000) (async) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) 19:19:04 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x1, 0x3) 19:19:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8}, 0x10) 19:19:04 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x1, 0x3) syz_open_dev$loop(&(0x7f0000000080), 0x1, 0x3) (async) 19:19:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0xa8, 0x8000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:05 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040), 0x2) [ 898.965673] misc userio: No port type given on /dev/userio 19:19:05 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x4, {0x6, 0x25c2, "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", 0x8, 0x8, 0x3, 0x1, 0x4, 0x80, 0x3f, 0x1}, r3}}, 0x128) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {r1, 0x1}}, 0x10) (async) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {r1, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f0000000240)) 19:19:05 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r0, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r0}}, 0x10) 19:19:05 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x80000000, 0x6, 0x8, 0x2c2, r0, 0x3ff, '\x00', r1, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x48) syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffe, 0x800083) [ 899.106613] misc userio: No port type given on /dev/userio 19:19:05 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000280), r1}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r4, 0x2, 0xff, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r7}}, 0x18) (async) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000740)={0x8, 0x120, 0xfa00, {0x1, {0x0, 0x3, "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", 0x25, 0x81, 0xc5, 0x1, 0x9, 0x8, 0x2, 0x1}, r7}}, 0x128) (async) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, 0x0, &(0x7f0000000ac0)) (async) connect$bt_sco(r8, &(0x7f0000000880), 0x8) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000228bd7000fddbdf2502003d8643000004000180080003000400000008000300040000000800020000000000000000000300000014000114bb000000310000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20041010}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r9, 0x2, 0xff, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r9, 0x4, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 19:19:05 executing program 1: write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x7}, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec000000744fed314cbc1e835378bfac0de597bda8e465174ccd6147b15d6dd93b88534a2e3b332b530917e2135e4b12fe2bef8059fa02d3942068ccd26287901270f9ce91b4bbaac3c59cd59dd5ede1328968d97ab208e343d366009637e349a70fbb5b741681e7a54db08289c88ae5a0a69ac587ca960118c19a2313edb1102f0ad21190e48d22b791d50bce0898a1a1cb2c07b390bc25f14206c552014c4cbb955c27aa1cb12e4e4c67524a77d2bf7c8a52eeeef7208bd6e39b3d268914031f60fd23c66f3a0c967ac97b4704f087593b70d7496ca2f125dda9d6884a8abcfdc4f540a76c22148d353e25c800"/252, @ANYRES16=r1, @ANYBLOB="08002dbd7000fcdbdf250600000040000180060005004e240000050002000900000008000600020000001400040000000000000000000000ffff0a010100060001000a00000008000300e000000208000200070000003c000180060005004e200000050002000100000008000300ac14142c08000300ac1414aa080003007f000001060001000a00000005000200010000002c00018008000700", @ANYRES32=0x0, @ANYBLOB="0600010002000000060005004e230000060005004e23000008000700", @ANYRES32=0x0, @ANYBLOB="08000300030000000800020000000000080003000500000008000300040000000800020004000000"], 0xec}, 0x1, 0x0, 0x0, 0x4091}, 0x41) 19:19:05 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r0, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r0}}, 0x10) 19:19:05 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x80000000, 0x6, 0x8, 0x2c2, r0, 0x3ff, '\x00', r1, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x48) (async, rerun: 64) syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffe, 0x800083) (rerun: 64) 19:19:05 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040), 0x2) 19:19:05 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x2, 0x1}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r2}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x4, {0x2, 0x20000000, "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", 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1}, r2}}, 0x128) 19:19:05 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r0, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r0}}, 0x10) 19:19:05 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x80000000, 0x6, 0x8, 0x2c2, r0, 0x3ff, '\x00', r1, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x48) syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffe, 0x800083) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x80000000, 0x6, 0x8, 0x2c2, r0, 0x3ff, '\x00', r1, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x48) (async) syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffe, 0x800083) (async) 19:19:05 executing program 1: write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x7}, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec000000744fed314cbc1e835378bfac0de597bda8e465174ccd6147b15d6dd93b88534a2e3b332b530917e2135e4b12fe2bef8059fa02d3942068ccd26287901270f9ce91b4bbaac3c59cd59dd5ede1328968d97ab208e343d366009637e349a70fbb5b741681e7a54db08289c88ae5a0a69ac587ca960118c19a2313edb1102f0ad21190e48d22b791d50bce0898a1a1cb2c07b390bc25f14206c552014c4cbb955c27aa1cb12e4e4c67524a77d2bf7c8a52eeeef7208bd6e39b3d268914031f60fd23c66f3a0c967ac97b4704f087593b70d7496ca2f125dda9d6884a8abcfdc4f540a76c22148d353e25c800"/252, @ANYRES16=r1, @ANYBLOB="08002dbd7000fcdbdf250600000040000180060005004e240000050002000900000008000600020000001400040000000000000000000000ffff0a010100060001000a00000008000300e000000208000200070000003c000180060005004e200000050002000100000008000300ac14142c08000300ac1414aa080003007f000001060001000a00000005000200010000002c00018008000700", @ANYRES32=0x0, @ANYBLOB="0600010002000000060005004e230000060005004e23000008000700", @ANYRES32=0x0, @ANYBLOB="08000300030000000800020000000000080003000500000008000300040000000800020004000000"], 0xec}, 0x1, 0x0, 0x0, 0x4091}, 0x41) 19:19:05 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x2, 0x1}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r2}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x4, {0x2, 0x20000000, "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", 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1}, r2}}, 0x128) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x2, 0x1}}, 0x20) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980), 0x13f, 0x4}}, 0x20) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r2}}, 0x18) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x4, {0x2, 0x20000000, "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", 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1}, r2}}, 0x128) (async) 19:19:05 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:05 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040), 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040), 0x2) (async) [ 899.868474] misc userio: No port type given on /dev/userio [ 899.955041] misc userio: No port type given on /dev/userio [ 899.969514] misc userio: No port type given on /dev/userio 19:19:06 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000040), 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:06 executing program 1: write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x7}, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec000000744fed314cbc1e835378bfac0de597bda8e465174ccd6147b15d6dd93b88534a2e3b332b530917e2135e4b12fe2bef8059fa02d3942068ccd26287901270f9ce91b4bbaac3c59cd59dd5ede1328968d97ab208e343d366009637e349a70fbb5b741681e7a54db08289c88ae5a0a69ac587ca960118c19a2313edb1102f0ad21190e48d22b791d50bce0898a1a1cb2c07b390bc25f14206c552014c4cbb955c27aa1cb12e4e4c67524a77d2bf7c8a52eeeef7208bd6e39b3d268914031f60fd23c66f3a0c967ac97b4704f087593b70d7496ca2f125dda9d6884a8abcfdc4f540a76c22148d353e25c800"/252, @ANYRES16=r1, @ANYBLOB="08002dbd7000fcdbdf250600000040000180060005004e240000050002000900000008000600020000001400040000000000000000000000ffff0a010100060001000a00000008000300e000000208000200070000003c000180060005004e200000050002000100000008000300ac14142c08000300ac1414aa080003007f000001060001000a00000005000200010000002c00018008000700", @ANYRES32=0x0, @ANYBLOB="0600010002000000060005004e230000060005004e23000008000700", @ANYRES32=0x0, @ANYBLOB="08000300030000000800020000000000080003000500000008000300040000000800020004000000"], 0xec}, 0x1, 0x0, 0x0, 0x4091}, 0x41) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x7}, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec000000744fed314cbc1e835378bfac0de597bda8e465174ccd6147b15d6dd93b88534a2e3b332b530917e2135e4b12fe2bef8059fa02d3942068ccd26287901270f9ce91b4bbaac3c59cd59dd5ede1328968d97ab208e343d366009637e349a70fbb5b741681e7a54db08289c88ae5a0a69ac587ca960118c19a2313edb1102f0ad21190e48d22b791d50bce0898a1a1cb2c07b390bc25f14206c552014c4cbb955c27aa1cb12e4e4c67524a77d2bf7c8a52eeeef7208bd6e39b3d268914031f60fd23c66f3a0c967ac97b4704f087593b70d7496ca2f125dda9d6884a8abcfdc4f540a76c22148d353e25c800"/252, @ANYRES16=r1, @ANYBLOB="08002dbd7000fcdbdf250600000040000180060005004e240000050002000900000008000600020000001400040000000000000000000000ffff0a010100060001000a00000008000300e000000208000200070000003c000180060005004e200000050002000100000008000300ac14142c08000300ac1414aa080003007f000001060001000a00000005000200010000002c00018008000700", @ANYRES32=0x0, @ANYBLOB="0600010002000000060005004e230000060005004e23000008000700", @ANYRES32=0x0, @ANYBLOB="08000300030000000800020000000000080003000500000008000300040000000800020004000000"], 0xec}, 0x1, 0x0, 0x0, 0x4091}, 0x41) (async) 19:19:06 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:06 executing program 0: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000000c0)="2c4d7afb3e6286d68bec01e561cbd5bc3696b27372af9e8b19aac60c407c6068734a0575712606e8af7fd6ceef32094579746f9c36877742ee42429347f53a7d755bdd70a9f0a99a3de15446cb488cb7f7f55a7ffa16299014f446aaefc42902f2f58de5cd977b1350ee41c53371ae19f4c3a3aafbcff2ddcc775990ec2dea33769af4224d881f981eab7a8a53d05ac8f20b93b7d7bcc8d2c70147796165e80ee1fb5e2083a53b4186aaf2873ff9d1358ef4e96b994c92a58034e2d23549f3cca949ffd54c7d4837e32f43c870d217cb38f984d6e0d56ada6530acc916140c4556f1ffe281c8d04685436fd7d4936b9d", 0xf0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000040)={r0, 0x1000, &(0x7f00000001c0)=""/4096}) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000011c0), 0x10000, 0x0) getsockname$l2tp(r1, &(0x7f0000001200)={0x2, 0x0, @multicast1}, &(0x7f0000001240)=0x10) 19:19:06 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x10000000002, 0x397561) ioctl$LOOP_CLR_FD(r1, 0x4c01) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:06 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x2, 0x1}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r2}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x4, {0x2, 0x20000000, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942631b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040dea88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f8e4b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a500", 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1}, r2}}, 0x128) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x4, {0x2, 0x20000000, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942631b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040dea88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f8e4b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a500", 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1}, r2}}, 0x128) 19:19:06 executing program 0: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000000c0)="2c4d7afb3e6286d68bec01e561cbd5bc3696b27372af9e8b19aac60c407c6068734a0575712606e8af7fd6ceef32094579746f9c36877742ee42429347f53a7d755bdd70a9f0a99a3de15446cb488cb7f7f55a7ffa16299014f446aaefc42902f2f58de5cd977b1350ee41c53371ae19f4c3a3aafbcff2ddcc775990ec2dea33769af4224d881f981eab7a8a53d05ac8f20b93b7d7bcc8d2c70147796165e80ee1fb5e2083a53b4186aaf2873ff9d1358ef4e96b994c92a58034e2d23549f3cca949ffd54c7d4837e32f43c870d217cb38f984d6e0d56ada6530acc916140c4556f1ffe281c8d04685436fd7d4936b9d", 0xf0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000040)={r0, 0x1000, &(0x7f00000001c0)=""/4096}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async, rerun: 64) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000011c0), 0x10000, 0x0) (rerun: 64) getsockname$l2tp(r1, &(0x7f0000001200)={0x2, 0x0, @multicast1}, &(0x7f0000001240)=0x10) 19:19:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r2, 0x2, 0xff, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x80, r2, 0x5, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x4880) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:06 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x10000000002, 0x397561) ioctl$LOOP_CLR_FD(r1, 0x4c01) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:06 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 900.733092] misc userio: No port type given on /dev/userio 19:19:06 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) (async) connect$phonet_pipe(r2, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000040), 0x4) (async) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000040), 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:06 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x4000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x7ff, @empty, 0x8}, {0xa, 0x4e20, 0x3, @local, 0xfffffffb}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000900), 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r4}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000600)={0xb, 0x10, 0xfa00, {&(0x7f0000000540), r4}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f, 0xba5e2aa8648307f5}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000440)={0xa, 0x4, 0xfa00, {r6}}, 0xc) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000280)={0x9, 0x108, 0xfa00, {r5, 0x20, "9565c8", "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"}}, 0x110) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000680)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000007c0)={0x9, 0x108, 0xfa00, {r7, 0x6, "954399", "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"}}, 0x110) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000700)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @remote, 0x1}, {0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x93b7}, r1, 0x8}}, 0x48) 19:19:06 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x10000000002, 0x397561) ioctl$LOOP_CLR_FD(r1, 0x4c01) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r2, 0x2, 0xff, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x80, r2, 0x5, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x4880) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:06 executing program 0: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000000c0)="2c4d7afb3e6286d68bec01e561cbd5bc3696b27372af9e8b19aac60c407c6068734a0575712606e8af7fd6ceef32094579746f9c36877742ee42429347f53a7d755bdd70a9f0a99a3de15446cb488cb7f7f55a7ffa16299014f446aaefc42902f2f58de5cd977b1350ee41c53371ae19f4c3a3aafbcff2ddcc775990ec2dea33769af4224d881f981eab7a8a53d05ac8f20b93b7d7bcc8d2c70147796165e80ee1fb5e2083a53b4186aaf2873ff9d1358ef4e96b994c92a58034e2d23549f3cca949ffd54c7d4837e32f43c870d217cb38f984d6e0d56ada6530acc916140c4556f1ffe281c8d04685436fd7d4936b9d", 0xf0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000040)={r0, 0x1000, &(0x7f00000001c0)=""/4096}) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000011c0), 0x10000, 0x0) getsockname$l2tp(r1, &(0x7f0000001200)={0x2, 0x0, @multicast1}, &(0x7f0000001240)=0x10) [ 900.812829] misc userio: No port type given on /dev/userio 19:19:06 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x4000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x7ff, @empty, 0x8}, {0xa, 0x4e20, 0x3, @local, 0xfffffffb}}}, 0x48) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000900), 0x111, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r4}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000600)={0xb, 0x10, 0xfa00, {&(0x7f0000000540), r4}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f, 0xba5e2aa8648307f5}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000440)={0xa, 0x4, 0xfa00, {r6}}, 0xc) (async) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000280)={0x9, 0x108, 0xfa00, {r5, 0x20, "9565c8", "806c0c6301c79b65ba3f2b3052c966e15b0ff69c4af5fcb576a6ea930503d44eead8bbfd0b5275e81648f04842df95a7a54f574669c4f231691d9497389a1b97b343890681e48fdb1da1e4fae514b6f1404e4c3836a363a2ab6eeafda4313a626779ac4862e3c3292d7f8a65f54cbd9e11dde0a398c38337abf1e3bfc3047a32e93d9d6e62c276752ef8bddff56d1f6d23332bd63774a2929c4886c752278d791214c2f6f74e1fc8b1fc729ebeb18b5d24969020f086a2376a977766d4f798ad43c39b320b80abc89c22cb4e0ae70a4c1b8eef58d2f1215cab688de075d6f0c437c894cbe32f1d624d4d4162f8a281471de70236522223f316619d4d95cbc349"}}, 0x110) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000680)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000007c0)={0x9, 0x108, 0xfa00, {r7, 0x6, "954399", "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"}}, 0x110) (async) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000700)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @remote, 0x1}, {0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x93b7}, r1, 0x8}}, 0x48) 19:19:06 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) (async) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000040), 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:06 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYRES32], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008090}, 0x4) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x204, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc081) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000000), 0x2) 19:19:06 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_open_dev$loop(&(0x7f0000000040), 0x3521, 0x140c0) 19:19:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x81, 0x1f}, 0x10) 19:19:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r2, 0x2, 0xff, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x80, r2, 0x5, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x4880) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:07 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x4000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x7ff, @empty, 0x8}, {0xa, 0x4e20, 0x3, @local, 0xfffffffb}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000900), 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r4}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000600)={0xb, 0x10, 0xfa00, {&(0x7f0000000540), r4}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f, 0xba5e2aa8648307f5}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000440)={0xa, 0x4, 0xfa00, {r6}}, 0xc) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000280)={0x9, 0x108, 0xfa00, {r5, 0x20, "9565c8", "806c0c6301c79b65ba3f2b3052c966e15b0ff69c4af5fcb576a6ea930503d44eead8bbfd0b5275e81648f04842df95a7a54f574669c4f231691d9497389a1b97b343890681e48fdb1da1e4fae514b6f1404e4c3836a363a2ab6eeafda4313a626779ac4862e3c3292d7f8a65f54cbd9e11dde0a398c38337abf1e3bfc3047a32e93d9d6e62c276752ef8bddff56d1f6d23332bd63774a2929c4886c752278d791214c2f6f74e1fc8b1fc729ebeb18b5d24969020f086a2376a977766d4f798ad43c39b320b80abc89c22cb4e0ae70a4c1b8eef58d2f1215cab688de075d6f0c437c894cbe32f1d624d4d4162f8a281471de70236522223f316619d4d95cbc349"}}, 0x110) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000680)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000007c0)={0x9, 0x108, 0xfa00, {r7, 0x6, "954399", "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"}}, 0x110) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000700)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @remote, 0x1}, {0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x93b7}, r1, 0x8}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x4000) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x7ff, @empty, 0x8}, {0xa, 0x4e20, 0x3, @local, 0xfffffffb}}}, 0x48) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980), 0x13f, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000900), 0x111, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r4}}, 0x18) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000600)={0xb, 0x10, 0xfa00, {&(0x7f0000000540), r4}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x111, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0xba5e2aa8648307f5}}, 0x20) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000440)={0xa, 0x4, 0xfa00, {r6}}, 0xc) (async) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000280)={0x9, 0x108, 0xfa00, {r5, 0x20, "9565c8", "806c0c6301c79b65ba3f2b3052c966e15b0ff69c4af5fcb576a6ea930503d44eead8bbfd0b5275e81648f04842df95a7a54f574669c4f231691d9497389a1b97b343890681e48fdb1da1e4fae514b6f1404e4c3836a363a2ab6eeafda4313a626779ac4862e3c3292d7f8a65f54cbd9e11dde0a398c38337abf1e3bfc3047a32e93d9d6e62c276752ef8bddff56d1f6d23332bd63774a2929c4886c752278d791214c2f6f74e1fc8b1fc729ebeb18b5d24969020f086a2376a977766d4f798ad43c39b320b80abc89c22cb4e0ae70a4c1b8eef58d2f1215cab688de075d6f0c437c894cbe32f1d624d4d4162f8a281471de70236522223f316619d4d95cbc349"}}, 0x110) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000680), 0x13f, 0x6}}, 0x20) (async) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000007c0)={0x9, 0x108, 0xfa00, {r7, 0x6, "954399", "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"}}, 0x110) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000700)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @remote, 0x1}, {0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x93b7}, r1, 0x8}}, 0x48) (async) 19:19:07 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_open_dev$loop(&(0x7f0000000040), 0x3521, 0x140c0) socket$packet(0x11, 0x3, 0x300) (async) syz_open_dev$loop(&(0x7f0000000040), 0x3521, 0x140c0) (async) [ 901.020178] misc userio: No port type given on /dev/userio 19:19:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYRES32], 0x44}}, 0x0) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYRES32], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008090}, 0x4) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008090}, 0x4) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x204, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc081) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000000), 0x2) 19:19:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (async) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x81, 0x1f}, 0x10) 19:19:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:07 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_open_dev$loop(&(0x7f0000000040), 0x3521, 0x140c0) (async) syz_open_dev$loop(&(0x7f0000000040), 0x3521, 0x140c0) 19:19:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="df7600000445fcdcfddd2a8c5fb4e944d0bd8cf25ebfa8a7cdfc0a92f83287ad02761bfbd9bc7e2a5bc8deaff4ad503ea1d4ba15fec3a9cdcaad4a160fa48a6a6f9684338dce4ee6ae", @ANYRES16, @ANYBLOB="002329bd7000ffdbdf250700007fffffff001f00000005001200060000000c000f00a1b55c32b33301000000000000800c001600020000800000000000002100000077bfafed63000001000000000006001a004e240000080018005259fdbbed05503c023e57b0411d1b627e0157f968f7400dbe3e366040dec102416f365af36248d2ed4eb58c4a76d4b184a0da77e37d3b16adaeef96a6cd1809feedaa8d3236975bc5038300"/178], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYRES32], 0x44}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x48, r4, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x20}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0200ff000200070000ebab6a8671eac4c66d0a000c00"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r3) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x105b7b701fe4fef2}, 0x20040880) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x120, 0x0, 0x83a, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "df20e9d418958305abc032c2ec295e66"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1ff}]}]}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1a5bc11e3f68e363a14afbcbbba01a28ce4394691e70d99ee2439a2098a285de"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5e82}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x800}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_SEC_KEY={0x30, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x20}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555e}]}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xb0, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x80000001}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x70, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffb}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x7}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x24044944) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x2, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x200000c4}, 0x40005) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x8c, r2, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x90}, 0xc000) 19:19:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (async) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x81, 0x1f}, 0x10) 19:19:07 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x2c0400) 19:19:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYRES32], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008090}, 0x4) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x204, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc081) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000000), 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYRES32], 0x44}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008090}, 0x4) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x204, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc081) (async) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000000), 0x2) (async) [ 901.190806] misc userio: No port type given on /dev/userio 19:19:07 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000300)={0x9, 0x108, 0xfa00, {r4, 0x5, "ae0ca4", "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"}}, 0x110) 19:19:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8}, 0x10) 19:19:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="df7600000445fcdcfddd2a8c5fb4e944d0bd8cf25ebfa8a7cdfc0a92f83287ad02761bfbd9bc7e2a5bc8deaff4ad503ea1d4ba15fec3a9cdcaad4a160fa48a6a6f9684338dce4ee6ae", @ANYRES16, @ANYBLOB="002329bd7000ffdbdf250700007fffffff001f00000005001200060000000c000f00a1b55c32b33301000000000000800c001600020000800000000000002100000077bfafed63000001000000000006001a004e240000080018005259fdbbed05503c023e57b0411d1b627e0157f968f7400dbe3e366040dec102416f365af36248d2ed4eb58c4a76d4b184a0da77e37d3b16adaeef96a6cd1809feedaa8d3236975bc5038300"/178], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYRES32], 0x44}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x48, r4, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x20}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c0) (async, rerun: 64) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0200ff000200070000ebab6a8671eac4c66d0a000c00"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) (rerun: 64) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r3) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x105b7b701fe4fef2}, 0x20040880) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x120, 0x0, 0x83a, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "df20e9d418958305abc032c2ec295e66"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1ff}]}]}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1a5bc11e3f68e363a14afbcbbba01a28ce4394691e70d99ee2439a2098a285de"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5e82}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x800}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_SEC_KEY={0x30, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x20}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555e}]}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xb0, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x80000001}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x70, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffb}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x7}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x24044944) (async, rerun: 64) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x2, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x200000c4}, 0x40005) (async, rerun: 64) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x8c, r2, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x90}, 0xc000) 19:19:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x111001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 19:19:07 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x2c0400) syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x2c0400) (async) [ 901.292912] misc userio: No port type given on /dev/userio 19:19:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8}, 0x10) 19:19:07 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async, rerun: 64) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (rerun: 64) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f, 0x2}}, 0x20) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) (rerun: 32) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000300)={0x9, 0x108, 0xfa00, {r4, 0x5, "ae0ca4", "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"}}, 0x110) 19:19:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xffff, 0x40000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000), 0x2) 19:19:07 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x2c0400) 19:19:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x111001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r2}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 19:19:07 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000000c0)={r1, 0x8, {0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x3, 0x16, 0x8, "7e4cef0f04b96b08b227fd59695e14bf570adc94fc5292187a47c41c65c806fe0c60af0e01bae14dbfc2aebb3f688c519fa5f58a5a864b7f51fa462ec834b6c6", "073205c6b84923ffa7073d1239e70c2ca9c85d1a6c95a581c07657794a2971f9a1ad03283d265bf9b31788727f21c00afc2482e3975badad13785c27a7b9ff6b", "ad92f3ca0d67f26f2cc17667630723862e61f07b50313758becd7269113f7fa8", [0x2, 0x7]}}) 19:19:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xffff, 0x40000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) (async) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000), 0x2) 19:19:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x111001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r2}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x111001, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r2}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r2}}, 0x10) (async) [ 901.460744] misc userio: No port type given on /dev/userio 19:19:07 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000000c0)={r1, 0x8, {0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x3, 0x16, 0x8, "7e4cef0f04b96b08b227fd59695e14bf570adc94fc5292187a47c41c65c806fe0c60af0e01bae14dbfc2aebb3f688c519fa5f58a5a864b7f51fa462ec834b6c6", "073205c6b84923ffa7073d1239e70c2ca9c85d1a6c95a581c07657794a2971f9a1ad03283d265bf9b31788727f21c00afc2482e3975badad13785c27a7b9ff6b", "ad92f3ca0d67f26f2cc17667630723862e61f07b50313758becd7269113f7fa8", [0x2, 0x7]}}) [ 901.542535] misc userio: No port type given on /dev/userio 19:19:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="df7600000445fcdcfddd2a8c5fb4e944d0bd8cf25ebfa8a7cdfc0a92f83287ad02761bfbd9bc7e2a5bc8deaff4ad503ea1d4ba15fec3a9cdcaad4a160fa48a6a6f9684338dce4ee6ae", @ANYRES16, @ANYBLOB="002329bd7000ffdbdf250700007fffffff001f00000005001200060000000c000f00a1b55c32b33301000000000000800c001600020000800000000000002100000077bfafed63000001000000000006001a004e240000080018005259fdbbed05503c023e57b0411d1b627e0157f968f7400dbe3e366040dec102416f365af36248d2ed4eb58c4a76d4b184a0da77e37d3b16adaeef96a6cd1809feedaa8d3236975bc5038300"/178], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYRES32], 0x44}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x48, r4, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x20}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c0) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0200ff000200070000ebab6a8671eac4c66d0a000c00"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r3) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x105b7b701fe4fef2}, 0x20040880) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x120, 0x0, 0x83a, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "df20e9d418958305abc032c2ec295e66"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1ff}]}]}, @NL802154_ATTR_SEC_KEY={0x64, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1a5bc11e3f68e363a14afbcbbba01a28ce4394691e70d99ee2439a2098a285de"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5e82}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x800}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_SEC_KEY={0x30, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x20}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555e}]}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xb0, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x80000001}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x70, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffb}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x7}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x24044944) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x2, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x200000c4}, 0x40005) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x8c, r2, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x90}, 0xc000) (rerun: 32) 19:19:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8}, 0x10) 19:19:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0xffff, 0x40000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000), 0x2) 19:19:07 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000000c0)={r1, 0x8, {0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x3, 0x16, 0x8, "7e4cef0f04b96b08b227fd59695e14bf570adc94fc5292187a47c41c65c806fe0c60af0e01bae14dbfc2aebb3f688c519fa5f58a5a864b7f51fa462ec834b6c6", "073205c6b84923ffa7073d1239e70c2ca9c85d1a6c95a581c07657794a2971f9a1ad03283d265bf9b31788727f21c00afc2482e3975badad13785c27a7b9ff6b", "ad92f3ca0d67f26f2cc17667630723862e61f07b50313758becd7269113f7fa8", [0x2, 0x7]}}) [ 901.697646] misc userio: No port type given on /dev/userio 19:19:07 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000300)={0x9, 0x108, 0xfa00, {r4, 0x5, "ae0ca4", "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"}}, 0x110) 19:19:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:07 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x401102, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x8000000000000001, 0x109800) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000280)=0x4) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) getpeername$l2tp(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) syz_open_dev$media(&(0x7f0000000180), 0x8, 0x2600) write$nbd(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="67446698000000000300030002000000fbfd721d302bbcd050b10010c1ee3d09000000000000006fedb4348fbdc461e8d84af9ed74cd7876480fa929075db2382b8900000000"], 0x46) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x10400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$802154_raw(r0, &(0x7f0000000140)={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x14) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffffffff, 0x414003) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000500)={0x2, 0x96, &(0x7f0000000440)="e8a9d897d436d1414dca74915b23c5d2a2659d640bec00c2498f3758ab506a5d14a6410e1a0fd66d482973aec091ee390ee731525564f52178ccb14d1e69820b5ae5b4b18db192e3e3656be118ad533343e92f47855f3af47e30430143ff4f2a084b4aec3fb89e6d6e6b0f5eb20d7fb80942de46c4cae4e9bf907c59f0e669d49db8b67fde13bafdef11f8343b45ceaca0ec9936204e"}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) 19:19:07 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r4, 0x1, "fb193c", "d6e10517488b1ff5997327cce691ef505b08409867ff5bedc9633a1ba0130f2be459f009f02fc9b18b64c1624ed40c72108d17f2279bae3daff53294266562a4f9b3dd50e6078a2d2582dcd89aa0176cb7dbbd5166acf0b2011832b21a72a4e19f52a38de386415efe7ccf26da742c8c47cbe64e995814b58c5b052f86a690a8d9d5d92feb3b0ddfd132fea191d312e70140716f6ffc0102ebd3645d151ef76e91eac20351f3b02d9a14634b232606efb7433953f92b76f930cb434b44f17f60d9bfffb1404841be55627717f48542aa1c3fdc6a8fe9d27845568a6c07fd5760acda3f7c83e6d8c211e540a62ff6532518ce2a84b5083d92a835bccc217f8244"}}, 0x110) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x3, {0xff, 0x8000, "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", 0x5, 0x40, 0xff, 0x7f, 0xff, 0x20, 0x0, 0x1}, r2}}, 0x128) 19:19:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8}, 0x10) 19:19:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYRESDEC=r0], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x200e00, 0x0) 19:19:07 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x401102, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x8000000000000001, 0x109800) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000280)=0x4) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) getpeername$l2tp(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) syz_open_dev$media(&(0x7f0000000180), 0x8, 0x2600) write$nbd(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="67446698000000000300030002000000fbfd721d302bbcd050b10010c1ee3d09000000000000006fedb4348fbdc461e8d84af9ed74cd7876480fa929075db2382b8900000000"], 0x46) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x10400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$802154_raw(r0, &(0x7f0000000140)={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x14) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffffffff, 0x414003) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000500)={0x2, 0x96, &(0x7f0000000440)="e8a9d897d436d1414dca74915b23c5d2a2659d640bec00c2498f3758ab506a5d14a6410e1a0fd66d482973aec091ee390ee731525564f52178ccb14d1e69820b5ae5b4b18db192e3e3656be118ad533343e92f47855f3af47e30430143ff4f2a084b4aec3fb89e6d6e6b0f5eb20d7fb80942de46c4cae4e9bf907c59f0e669d49db8b67fde13bafdef11f8343b45ceaca0ec9936204e"}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x401102, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000100), 0x8000000000000001, 0x109800) (async) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000280)=0x4) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async) getpeername$l2tp(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) (async) syz_open_dev$media(&(0x7f0000000180), 0x8, 0x2600) (async) write$nbd(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="67446698000000000300030002000000fbfd721d302bbcd050b10010c1ee3d09000000000000006fedb4348fbdc461e8d84af9ed74cd7876480fa929075db2382b8900000000"], 0x46) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x10400, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bind$802154_raw(r0, &(0x7f0000000140)={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x14) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) (async) syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffffffff, 0x414003) (async) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000500)={0x2, 0x96, &(0x7f0000000440)="e8a9d897d436d1414dca74915b23c5d2a2659d640bec00c2498f3758ab506a5d14a6410e1a0fd66d482973aec091ee390ee731525564f52178ccb14d1e69820b5ae5b4b18db192e3e3656be118ad533343e92f47855f3af47e30430143ff4f2a084b4aec3fb89e6d6e6b0f5eb20d7fb80942de46c4cae4e9bf907c59f0e669d49db8b67fde13bafdef11f8343b45ceaca0ec9936204e"}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) (async) 19:19:07 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYRESDEC=r0], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x200e00, 0x0) 19:19:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8}, 0x10) 19:19:07 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000200)={0x8, 0xfffffffffffffe73, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:07 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r4, 0x1, "fb193c", "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"}}, 0x110) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x3, {0xff, 0x8000, "2e8bd902d374dfca8bdbeeaf94e1d81aa0901379056a35fd4518165d6951e2ae4387a46f27ed7c6ce402b5e4e7b5683485f433937c527beeaeb8a8cdf8c931b60be689fa06f7b4e6ecb7a21a1b632d53caf05ce43c3dec7740ef3bab3bc4bb0222d5bb20ca8c7f2a866fc034b45bd1f5efdf9f8910c9810c500df903f4cfaba42a929ccac39a89234b44d7535cf77889f7c2a2e6dc3fc5bb99acab25e60fb09c6f518b4316c820b56c6f67c44d7c229ee4bef249191038bed60c5d7b736ec2769208ad72aa7b37da02e9fba9d9265019fcab3257d035ddb2e9cae2f53818769f9765084789dc83682eb59b1194d61dc743d24dedc5a8e81ebd06610242ba296b", 0x5, 0x40, 0xff, 0x7f, 0xff, 0x20, 0x0, 0x1}, r2}}, 0x128) [ 901.908451] misc userio: No port type given on /dev/userio 19:19:07 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x401102, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x8000000000000001, 0x109800) (async) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000280)=0x4) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async) getpeername$l2tp(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) syz_open_dev$media(&(0x7f0000000180), 0x8, 0x2600) (async) write$nbd(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="67446698000000000300030002000000fbfd721d302bbcd050b10010c1ee3d09000000000000006fedb4348fbdc461e8d84af9ed74cd7876480fa929075db2382b8900000000"], 0x46) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x10400, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) bind$802154_raw(r0, &(0x7f0000000140)={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x14) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffffffff, 0x414003) (async) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000500)={0x2, 0x96, &(0x7f0000000440)="e8a9d897d436d1414dca74915b23c5d2a2659d640bec00c2498f3758ab506a5d14a6410e1a0fd66d482973aec091ee390ee731525564f52178ccb14d1e69820b5ae5b4b18db192e3e3656be118ad533343e92f47855f3af47e30430143ff4f2a084b4aec3fb89e6d6e6b0f5eb20d7fb80942de46c4cae4e9bf907c59f0e669d49db8b67fde13bafdef11f8343b45ceaca0ec9936204e"}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) 19:19:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYRESDEC=r0], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async, rerun: 32) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x200e00, 0x0) (rerun: 32) 19:19:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8}, 0x10) 19:19:08 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000200)={0x8, 0xfffffffffffffe73, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1}, r1}}, 0x128) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000200)={0x8, 0xfffffffffffffe73, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1}, r1}}, 0x128) (async) 19:19:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:08 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000000)) 19:19:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 902.008264] misc userio: No port type given on /dev/userio 19:19:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0x60, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x404c054}, 0x4040801) 19:19:08 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r4}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r4, 0x1, "fb193c", "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"}}, 0x110) (async) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r4, 0x1, "fb193c", "d6e10517488b1ff5997327cce691ef505b08409867ff5bedc9633a1ba0130f2be459f009f02fc9b18b64c1624ed40c72108d17f2279bae3daff53294266562a4f9b3dd50e6078a2d2582dcd89aa0176cb7dbbd5166acf0b2011832b21a72a4e19f52a38de386415efe7ccf26da742c8c47cbe64e995814b58c5b052f86a690a8d9d5d92feb3b0ddfd132fea191d312e70140716f6ffc0102ebd3645d151ef76e91eac20351f3b02d9a14634b232606efb7433953f92b76f930cb434b44f17f60d9bfffb1404841be55627717f48542aa1c3fdc6a8fe9d27845568a6c07fd5760acda3f7c83e6d8c211e540a62ff6532518ce2a84b5083d92a835bccc217f8244"}}, 0x110) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x3, {0xff, 0x8000, "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", 0x5, 0x40, 0xff, 0x7f, 0xff, 0x20, 0x0, 0x1}, r2}}, 0x128) 19:19:08 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async, rerun: 32) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000000)) (rerun: 32) 19:19:08 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000200)={0x8, 0xfffffffffffffe73, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0x60, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x404c054}, 0x4040801) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0x60, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x404c054}, 0x4040801) (async) 19:19:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x20000000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x39, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r3}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x106, 0x6}}, 0x20) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x440000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x5, @remote, 0x5}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:08 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async, rerun: 32) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (rerun: 32) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000000)) [ 902.148270] misc userio: No port type given on /dev/userio [ 902.157058] misc userio: No port type given on /dev/userio 19:19:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0x60, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x404c054}, 0x4040801) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0x60, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x404c054}, 0x4040801) (async) 19:19:08 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x28040) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000040)) 19:19:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000e3a72f000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x0, 0x704, 0x6fc00000, 0x1b82, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x48) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000100)={0x0, 0x74e0, 0x3, &(0x7f0000000080)=0x7}) r2 = socket$packet(0x11, 0x1, 0x300) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) 19:19:08 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r4}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x81, 0x800, "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", 0x9, 0xdc, 0x7f, 0x7f, 0x1f, 0x6, 0x80, 0x1}, r4}}, 0x120) 19:19:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:08 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x20}, 0x2) 19:19:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x20000000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x39, 0xa}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x39, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r3}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x106, 0x6}}, 0x20) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x440000, 0x0) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x440000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x5, @remote, 0x5}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000e3a72f000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x0, 0x704, 0x6fc00000, 0x1b82, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x48) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000100)={0x0, 0x74e0, 0x3, &(0x7f0000000080)=0x7}) r2 = socket$packet(0x11, 0x1, 0x300) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) 19:19:08 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x28040) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x28040) (async) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000040)) (async) 19:19:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:08 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r4}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x81, 0x800, "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", 0x9, 0xdc, 0x7f, 0x7f, 0x1f, 0x6, 0x80, 0x1}, r4}}, 0x120) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980), 0x13f, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r4}}, 0x18) (async) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x81, 0x800, "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", 0x9, 0xdc, 0x7f, 0x7f, 0x1f, 0x6, 0x80, 0x1}, r4}}, 0x120) (async) 19:19:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x20000000) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x39, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x106, 0x6}}, 0x20) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x440000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x5, @remote, 0x5}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:08 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x20}, 0x2) 19:19:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000e3a72f000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x0, 0x704, 0x6fc00000, 0x1b82, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x48) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000100)={0x0, 0x74e0, 0x3, &(0x7f0000000080)=0x7}) (async) r2 = socket$packet(0x11, 0x1, 0x300) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) 19:19:08 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x28040) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000040)) (async) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000040)) [ 902.380575] misc userio: No port type given on /dev/userio 19:19:08 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r4}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x81, 0x800, "0b93ebf46a485b8c3506a8d0fb6b91f123465c5c5261bb2c20f9b56afbf610d5ce8f7ad9e0b8195b31949df2ddb81d454755f1ecf24fd1ba375f8cc3281fb149ae90e749992dc0375215512e03e1ed5440b59c75a1852916756f751fae259cd718fd3d2208e17aa7e6e47d6316a3471013923ae0ae11526812c421fc7c27eb2b0fc2c2f72aece32cd7580ea07f72877ababe7cfb98bf622cce726f128d98de129b4f8f6afd122b5e7ca34ef0e5008de1820c7a0b85983db72f4add0de80ab1faeab92a821156be2e1cf0d0410df45ee76cb570e02261d2fc107b2c663fb9e39194b7b70aadf23d32f51f4707a5339fcb70dd0c5ef4e36c391c30949837c85d0a", 0x9, 0xdc, 0x7f, 0x7f, 0x1f, 0x6, 0x80, 0x1}, r4}}, 0x120) (async) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x81, 0x800, "0b93ebf46a485b8c3506a8d0fb6b91f123465c5c5261bb2c20f9b56afbf610d5ce8f7ad9e0b8195b31949df2ddb81d454755f1ecf24fd1ba375f8cc3281fb149ae90e749992dc0375215512e03e1ed5440b59c75a1852916756f751fae259cd718fd3d2208e17aa7e6e47d6316a3471013923ae0ae11526812c421fc7c27eb2b0fc2c2f72aece32cd7580ea07f72877ababe7cfb98bf622cce726f128d98de129b4f8f6afd122b5e7ca34ef0e5008de1820c7a0b85983db72f4add0de80ab1faeab92a821156be2e1cf0d0410df45ee76cb570e02261d2fc107b2c663fb9e39194b7b70aadf23d32f51f4707a5339fcb70dd0c5ef4e36c391c30949837c85d0a", 0x9, 0xdc, 0x7f, 0x7f, 0x1f, 0x6, 0x80, 0x1}, r4}}, 0x120) 19:19:08 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, r0, 0x13}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x939, 0x100) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000000c0)={r1, 0x5, {0x0, 0x0, 0x0, 0x200, 0xacd0, 0x0, 0x5, 0x12, 0x18, "a3171c54c79a92deb7cb2f73f55cf6163d7b868d52e6145046894658956185c1d353a71d5bdf096a2505cc68e9245674142b5f37b8ae8d8593951dc107f2eeec", "8005caf6b6d2bc2f3801c6c6d30a82434cab8b7838b1fb1d1458214ffad34fd6b9ad891adcc62fd90c66015953ef659333e8c61b6e922d614e53320248c33ad0", "d0786478de4ccd4f5d0d8d9f4d21cc5d9ba7ffdb38b9d4fd818600f08157b0e9", [0xfff, 0x6]}}) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x7ff, &(0x7f0000000200)=0x2) 19:19:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r3}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r5, 0x2}}, 0x18) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f00000004c0)={0x8, 0x120, 0xfa00, {0x2, {0x2, 0x8, "2ce748f0ecb88287b2f27e36e311b2c4a4f6a71261ea58a6f0a4b7e26f2fc7a4ccde308827918fefa545e854ae3795ad185acf92bd9d76b8c49ace2e69762b253deffe6f322632e75d689167b7ccf97edacc340b21162d2f66342af306caa37376fc117eee5107f24b14c4b6c7bc35b1426e8e478d3f0ac3058ad598600f07e5428d4f3e93bde0a704539e591603a796719bd42bb1ec4ba9fcd2e6202bb145f475717b5fe94acf344e4e8943f477dba8a597775e4ed744d81fc02f6bd0936c971fc9c7af20808e732eab7fb122e6026822abc6faab9410a7ec263a940b32618d5f7284943daf6cea938d1226587dc6ab605caf718d93acacda0877b0ccca1624", 0x9, 0x1f, 0x0, 0x40, 0x8, 0x8, 0x5, 0x1}}}, 0x128) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r3}}, 0xc) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) 19:19:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000000000000000008000c0001000000000001000000000006001a004e2500000800180064cc7d09d51f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x27}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xfe}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000010) 19:19:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:08 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x20}, 0x2) [ 902.456026] misc userio: No port type given on /dev/userio 19:19:08 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, r0, 0x13}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x939, 0x100) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000000c0)={r1, 0x5, {0x0, 0x0, 0x0, 0x200, 0xacd0, 0x0, 0x5, 0x12, 0x18, "a3171c54c79a92deb7cb2f73f55cf6163d7b868d52e6145046894658956185c1d353a71d5bdf096a2505cc68e9245674142b5f37b8ae8d8593951dc107f2eeec", "8005caf6b6d2bc2f3801c6c6d30a82434cab8b7838b1fb1d1458214ffad34fd6b9ad891adcc62fd90c66015953ef659333e8c61b6e922d614e53320248c33ad0", "d0786478de4ccd4f5d0d8d9f4d21cc5d9ba7ffdb38b9d4fd818600f08157b0e9", [0xfff, 0x6]}}) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x7ff, &(0x7f0000000200)=0x2) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, r0, 0x13}, 0x10) (async) syz_open_dev$loop(&(0x7f0000000000), 0x939, 0x100) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000000c0)={r1, 0x5, {0x0, 0x0, 0x0, 0x200, 0xacd0, 0x0, 0x5, 0x12, 0x18, "a3171c54c79a92deb7cb2f73f55cf6163d7b868d52e6145046894658956185c1d353a71d5bdf096a2505cc68e9245674142b5f37b8ae8d8593951dc107f2eeec", "8005caf6b6d2bc2f3801c6c6d30a82434cab8b7838b1fb1d1458214ffad34fd6b9ad891adcc62fd90c66015953ef659333e8c61b6e922d614e53320248c33ad0", "d0786478de4ccd4f5d0d8d9f4d21cc5d9ba7ffdb38b9d4fd818600f08157b0e9", [0xfff, 0x6]}}) (async) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x7ff, &(0x7f0000000200)=0x2) (async) 19:19:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000000000000000008000c0001000000000001000000000006001a004e2500000800180064cc7d09d51f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x27}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xfe}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000000000000000008000c0001000000000001000000000006001a004e2500000800180064cc7d09d51f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x27}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xfe}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000010) (async) 19:19:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:08 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x38001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000000c0)={0x80001, 0x0, [0x101, 0x400, 0x8, 0x2, 0x1ff, 0x6d3, 0x3, 0x2]}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x8001, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x54}}, 0x20000801) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000001c0)=0x1) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x8001}}, 0x18) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000080)=0x3) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0x6}, 0x2) [ 902.547543] misc userio: No port type given on /dev/userio 19:19:08 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, r0, 0x13}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x939, 0x100) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000000c0)={r1, 0x5, {0x0, 0x0, 0x0, 0x200, 0xacd0, 0x0, 0x5, 0x12, 0x18, "a3171c54c79a92deb7cb2f73f55cf6163d7b868d52e6145046894658956185c1d353a71d5bdf096a2505cc68e9245674142b5f37b8ae8d8593951dc107f2eeec", "8005caf6b6d2bc2f3801c6c6d30a82434cab8b7838b1fb1d1458214ffad34fd6b9ad891adcc62fd90c66015953ef659333e8c61b6e922d614e53320248c33ad0", "d0786478de4ccd4f5d0d8d9f4d21cc5d9ba7ffdb38b9d4fd818600f08157b0e9", [0xfff, 0x6]}}) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000000c0)={r1, 0x5, {0x0, 0x0, 0x0, 0x200, 0xacd0, 0x0, 0x5, 0x12, 0x18, "a3171c54c79a92deb7cb2f73f55cf6163d7b868d52e6145046894658956185c1d353a71d5bdf096a2505cc68e9245674142b5f37b8ae8d8593951dc107f2eeec", "8005caf6b6d2bc2f3801c6c6d30a82434cab8b7838b1fb1d1458214ffad34fd6b9ad891adcc62fd90c66015953ef659333e8c61b6e922d614e53320248c33ad0", "d0786478de4ccd4f5d0d8d9f4d21cc5d9ba7ffdb38b9d4fd818600f08157b0e9", [0xfff, 0x6]}}) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x7ff, &(0x7f0000000200)=0x2) 19:19:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000000000000000008000c0001000000000001000000000006001a004e2500000800180064cc7d09d51f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x27}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xfe}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000010) 19:19:08 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000200), 0x2) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:08 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x38001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000000c0)={0x80001, 0x0, [0x101, 0x400, 0x8, 0x2, 0x1ff, 0x6d3, 0x3, 0x2]}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x8001, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x54}}, 0x20000801) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000001c0)=0x1) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x8001}}, 0x18) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000080)=0x3) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0x6}, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x38001, 0x0) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000000c0)={0x80001, 0x0, [0x101, 0x400, 0x8, 0x2, 0x1ff, 0x6d3, 0x3, 0x2]}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x8001, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x54}}, 0x20000801) (async) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000001c0)=0x1) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) (async) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x8001}}, 0x18) (async) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) (async) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000080)=0x3) (async) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0x6}, 0x2) (async) 19:19:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000980), 0x13f, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r3}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0xa}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r5, 0x2}}, 0x18) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f00000004c0)={0x8, 0x120, 0xfa00, {0x2, {0x2, 0x8, "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", 0x9, 0x1f, 0x0, 0x40, 0x8, 0x8, 0x5, 0x1}}}, 0x128) (async) write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f00000004c0)={0x8, 0x120, 0xfa00, {0x2, {0x2, 0x8, "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", 0x9, 0x1f, 0x0, 0x40, 0x8, 0x8, 0x5, 0x1}}}, 0x128) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r3}}, 0xc) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) 19:19:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:08 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000980)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f00000004c0)={0x40, r0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4804}, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x3a8, r0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x184, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x401}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x10001}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}]}, @NL802154_DEVKEY_ATTR_ID={0xe4, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}]}, @NL802154_ATTR_SEC_DEVKEY={0x108, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xbc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xa6fc}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8000}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}]}, @NL802154_ATTR_SEC_DEVKEY={0xc8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x5555555555540004}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x4000}, 0x24024001) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0xa4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x78f}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x200248c0}, 0x40010) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040890}, 0x4000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) 19:19:08 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x125281) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x4, 0x0, [{0x40000000, 0x7, 0x3, 0x2000000, 0x3, 0x5, 0x4}, {0x80000008, 0x1, 0x6, 0x9, 0x8, 0x0, 0x7f}, {0x40000001, 0x1ff, 0x4, 0xfff, 0x1d, 0x80, 0x9}, {0x80000007, 0x7, 0x2, 0x58, 0x3, 0x59bbeb20, 0x200}]}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000000)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r1, @ANYRES16=r3, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c000100000000000006001a004e2400000800180064cc7d09951f010102ec0e879278db542aebf2db990a6b2d1f3f3d4e127e91bc1d5f0b981dd6d1ed0153988aa2de2f8017b4ee9d12a21d041523819c11b7fb5df3209b9e2424342db4af72b1ee9fa2db0f61f36e7885b62fa5df7a86758ef76abb211626a3489e0141ca7b97021a110a31a1"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x0) 19:19:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:08 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x125281) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x4, 0x0, [{0x40000000, 0x7, 0x3, 0x2000000, 0x3, 0x5, 0x4}, {0x80000008, 0x1, 0x6, 0x9, 0x8, 0x0, 0x7f}, {0x40000001, 0x1ff, 0x4, 0xfff, 0x1d, 0x80, 0x9}, {0x80000007, 0x7, 0x2, 0x58, 0x3, 0x59bbeb20, 0x200}]}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000000)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r1, @ANYRES16=r3, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c000100000000000006001a004e2400000800180064cc7d09951f010102ec0e879278db542aebf2db990a6b2d1f3f3d4e127e91bc1d5f0b981dd6d1ed0153988aa2de2f8017b4ee9d12a21d041523819c11b7fb5df3209b9e2424342db4af72b1ee9fa2db0f61f36e7885b62fa5df7a86758ef76abb211626a3489e0141ca7b97021a110a31a1"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x125281) (async) ioctl$LOOP_CLR_FD(r0, 0x4c01) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x4, 0x0, [{0x40000000, 0x7, 0x3, 0x2000000, 0x3, 0x5, 0x4}, {0x80000008, 0x1, 0x6, 0x9, 0x8, 0x0, 0x7f}, {0x40000001, 0x1ff, 0x4, 0xfff, 0x1d, 0x80, 0x9}, {0x80000007, 0x7, 0x2, 0x58, 0x3, 0x59bbeb20, 0x200}]}) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) connect$phonet_pipe(r3, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000000)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r1, @ANYRES16=r3, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c000100000000000006001a004e2400000800180064cc7d09951f010102ec0e879278db542aebf2db990a6b2d1f3f3d4e127e91bc1d5f0b981dd6d1ed0153988aa2de2f8017b4ee9d12a21d041523819c11b7fb5df3209b9e2424342db4af72b1ee9fa2db0f61f36e7885b62fa5df7a86758ef76abb211626a3489e0141ca7b97021a110a31a1"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x0) (async) 19:19:08 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x38001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000000c0)={0x80001, 0x0, [0x101, 0x400, 0x8, 0x2, 0x1ff, 0x6d3, 0x3, 0x2]}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x8001, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x54}}, 0x20000801) (async) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000001c0)=0x1) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x8001}}, 0x18) (async) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) (async) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000080)=0x3) (async) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0x6}, 0x2) 19:19:08 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000980)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f00000004c0)={0x40, r0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4804}, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x3a8, r0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x184, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x401}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x10001}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}]}, @NL802154_DEVKEY_ATTR_ID={0xe4, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}]}, @NL802154_ATTR_SEC_DEVKEY={0x108, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xbc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xa6fc}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8000}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}]}, @NL802154_ATTR_SEC_DEVKEY={0xc8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x5555555555540004}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x4000}, 0x24024001) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0xa4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x78f}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x200248c0}, 0x40010) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040890}, 0x4000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) 19:19:08 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000200), 0x2) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000200), 0x2) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) (async) 19:19:08 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000980)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f00000004c0)={0x40, r0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4804}, 0x1) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x3a8, r0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x184, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x401}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x10001}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}]}, @NL802154_DEVKEY_ATTR_ID={0xe4, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}]}, @NL802154_ATTR_SEC_DEVKEY={0x108, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xbc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xa6fc}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8000}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}]}, @NL802154_ATTR_SEC_DEVKEY={0xc8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x5555555555540004}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x4000}, 0x24024001) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0xa4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x78f}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x200248c0}, 0x40010) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x84001) (async, rerun: 32) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040890}, 0x4000) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) 19:19:08 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040), 0x2) 19:19:08 executing program 1: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x125281) (async) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x125281) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x4, 0x0, [{0x40000000, 0x7, 0x3, 0x2000000, 0x3, 0x5, 0x4}, {0x80000008, 0x1, 0x6, 0x9, 0x8, 0x0, 0x7f}, {0x40000001, 0x1ff, 0x4, 0xfff, 0x1d, 0x80, 0x9}, {0x80000007, 0x7, 0x2, 0x58, 0x3, 0x59bbeb20, 0x200}]}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000000)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r1, @ANYRES16=r3, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c000100000000000006001a004e2400000800180064cc7d09951f010102ec0e879278db542aebf2db990a6b2d1f3f3d4e127e91bc1d5f0b981dd6d1ed0153988aa2de2f8017b4ee9d12a21d041523819c11b7fb5df3209b9e2424342db4af72b1ee9fa2db0f61f36e7885b62fa5df7a86758ef76abb211626a3489e0141ca7b97021a110a31a1"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x0) 19:19:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r3}}, 0x18) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r5, 0x2}}, 0x18) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f00000004c0)={0x8, 0x120, 0xfa00, {0x2, {0x2, 0x8, "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", 0x9, 0x1f, 0x0, 0x40, 0x8, 0x8, 0x5, 0x1}}}, 0x128) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r3}}, 0xc) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) 19:19:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000)=0x7f, 0x4) 19:19:08 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000200), 0x2) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:08 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040), 0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040), 0x2) 19:19:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async, rerun: 32) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) (rerun: 32) connect$phonet_pipe(r1, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) (async) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000)=0x7f, 0x4) [ 902.965016] misc userio: No port type given on /dev/userio 19:19:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @private2}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:09 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x100000000002, 0x54003) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r0, 0x9, {0x0, 0x0, 0x0, 0xcc91, 0xfffffffffffeffff, 0x0, 0x3, 0x14, 0x10, "c1cbbd340cc69b714d8a8ad482b8092e59eb3c4ea052053e858d2a8a62d49cabed3d47b38a2cee43e6e17f16c40fe95beb0f38153b5b403270f802349d353449", "0ba0e6eccb26805270762f7d10c8d40ad2dfff40f4c33c092127d168ca92eea789b11d425f6322a0547d90080ba7ea5636e89a904f53ba6e00", "af22833b8b6ed2def713d53230691e4cea3625e2808522ce1bda79b6d5ec9d90", [0x80000100000001, 0x8]}}) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000200)=""/174, &(0x7f0000000000)=0xae) 19:19:09 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x2, @mcast1, 0x7f}, {0xa, 0x4e24, 0x28e, @local, 0x3}, r3, 0x4}}, 0x48) 19:19:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) (async) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000)=0x7f, 0x4) 19:19:09 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x100000000002, 0x54003) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r0, 0x9, {0x0, 0x0, 0x0, 0xcc91, 0xfffffffffffeffff, 0x0, 0x3, 0x14, 0x10, "c1cbbd340cc69b714d8a8ad482b8092e59eb3c4ea052053e858d2a8a62d49cabed3d47b38a2cee43e6e17f16c40fe95beb0f38153b5b403270f802349d353449", "0ba0e6eccb26805270762f7d10c8d40ad2dfff40f4c33c092127d168ca92eea789b11d425f6322a0547d90080ba7ea5636e89a904f53ba6e00", "af22833b8b6ed2def713d53230691e4cea3625e2808522ce1bda79b6d5ec9d90", [0x80000100000001, 0x8]}}) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000200)=""/174, &(0x7f0000000000)=0xae) [ 903.074591] misc userio: No port type given on /dev/userio [ 903.090676] misc userio: No port type given on /dev/userio 19:19:09 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040), 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040), 0x2) (async) 19:19:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) (async, rerun: 32) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (rerun: 32) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @private2}, r3}}, 0x30) (async, rerun: 64) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (rerun: 64) 19:19:09 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x100000000002, 0x54003) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r0, 0x9, {0x0, 0x0, 0x0, 0xcc91, 0xfffffffffffeffff, 0x0, 0x3, 0x14, 0x10, "c1cbbd340cc69b714d8a8ad482b8092e59eb3c4ea052053e858d2a8a62d49cabed3d47b38a2cee43e6e17f16c40fe95beb0f38153b5b403270f802349d353449", "0ba0e6eccb26805270762f7d10c8d40ad2dfff40f4c33c092127d168ca92eea789b11d425f6322a0547d90080ba7ea5636e89a904f53ba6e00", "af22833b8b6ed2def713d53230691e4cea3625e2808522ce1bda79b6d5ec9d90", [0x80000100000001, 0x8]}}) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000200)=""/174, &(0x7f0000000000)=0xae) 19:19:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x2, 0xff, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r1, 0x4, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0xfffffffffffffed4, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x804) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:09 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x2, @mcast1, 0x7f}, {0xa, 0x4e24, 0x28e, @local, 0x3}, r3, 0x4}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000340), 0x2, 0x5}}, 0x20) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0xa}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x2, @mcast1, 0x7f}, {0xa, 0x4e24, 0x28e, @local, 0x3}, r3, 0x4}}, 0x48) (async) 19:19:09 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x109603, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040)=0x33, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0x9}, 0x2) 19:19:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:09 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 19:19:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x2, 0xff, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r1, 0x4, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0xfffffffffffffed4, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x804) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x804) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @private2}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:09 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 19:19:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x2, 0xff, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r1, 0x4, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0xfffffffffffffed4, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x804) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (rerun: 64) 19:19:09 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x109603, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040)=0x33, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0x9}, 0x2) 19:19:09 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 19:19:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r1, r0}}, 0x18) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f00000002c0)=ANY=[@ANYBLOB="040000000300000007000000000000000100000000000000a90b0a0000000000ffff0000000000000100000000000062a693dbecfe6c3ba4d0e27ee700060000000000000008000000000000000800000000000000"]) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:09 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x2, @mcast1, 0x7f}, {0xa, 0x4e24, 0x28e, @local, 0x3}, r3, 0x4}}, 0x48) 19:19:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:09 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000000)={0x4, 0x0, [{0xc000000a, 0x3, 0x1, 0x3ff, 0x5}, {0x80000008, 0x5809, 0x400, 0x1, 0x7f}, {0x4, 0x81, 0x25, 0xc2a0, 0x80000000}, {0x0, 0x3, 0x6, 0xffff4119, 0x80000001}]}) 19:19:09 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x109603, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040)=0x33, 0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0x9}, 0x2) 19:19:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r1, 0x1000}}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0xfffffff7, 0x3f, "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", 0x1, 0x7f, 0x8b, 0xff, 0x1, 0x40, 0x40}, r1}}, 0x120) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r1, r0}}, 0x18) (async, rerun: 32) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f00000002c0)=ANY=[@ANYBLOB="040000000300000007000000000000000100000000000000a90b0a0000000000ffff0000000000000100000000000062a693dbecfe6c3ba4d0e27ee700060000000000000008000000000000000800000000000000"]) (rerun: 32) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:09 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000000)={0x4, 0x0, [{0xc000000a, 0x3, 0x1, 0x3ff, 0x5}, {0x80000008, 0x5809, 0x400, 0x1, 0x7f}, {0x4, 0x81, 0x25, 0xc2a0, 0x80000000}, {0x0, 0x3, 0x6, 0xffff4119, 0x80000001}]}) 19:19:09 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x40080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), r3, r4}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x3, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d07990176d74a2d3a9c9c296a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d108d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a500", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:09 executing program 2: clock_gettime(0x0, &(0x7f0000000040)) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:09 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r1, r0}}, 0x18) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f00000002c0)=ANY=[@ANYBLOB="040000000300000007000000000000000100000000000000a90b0a0000000000ffff0000000000000100000000000062a693dbecfe6c3ba4d0e27ee700060000000000000008000000000000000800000000000000"]) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r1, 0x1000}}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0xfffffff7, 0x3f, "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", 0x1, 0x7f, 0x8b, 0xff, 0x1, 0x40, 0x40}, r1}}, 0x120) (async) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0xfffffff7, 0x3f, "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", 0x1, 0x7f, 0x8b, 0xff, 0x1, 0x40, 0x40}, r1}}, 0x120) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:09 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) (async, rerun: 64) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async, rerun: 32) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x40080) (rerun: 32) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), r3, r4}}, 0x18) (async, rerun: 32) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x3, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d07990176d74a2d3a9c9c296a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d108d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a500", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) (rerun: 32) 19:19:09 executing program 2: clock_gettime(0x0, &(0x7f0000000040)) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) clock_gettime(0x0, &(0x7f0000000040)) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) 19:19:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:09 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000000)={0x4, 0x0, [{0xc000000a, 0x3, 0x1, 0x3ff, 0x5}, {0x80000008, 0x5809, 0x400, 0x1, 0x7f}, {0x4, 0x81, 0x25, 0xc2a0, 0x80000000}, {0x0, 0x3, 0x6, 0xffff4119, 0x80000001}]}) 19:19:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r1, 0x1000}}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0xfffffff7, 0x3f, "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", 0x1, 0x7f, 0x8b, 0xff, 0x1, 0x40, 0x40}, r1}}, 0x120) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) [ 903.612902] misc userio: No port type given on /dev/userio 19:19:09 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x401) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040)) 19:19:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0x1, r3, 0x0, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 903.696424] misc userio: No port type given on /dev/userio [ 903.704080] misc userio: No port type given on /dev/userio 19:19:09 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240), 0x13f, 0x8}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x40080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), r3, r4}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x3, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d07990176d74a2d3a9c9c296a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d108d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a500", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:09 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x401) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040)) 19:19:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000001b80)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000700000000000000250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102917de1aab338ecedd52cbf1464bb8991b876b7c56186922447a23adbf591284ddf03479dd6d179100ceeffd4a1bb85f8851189b10a960dc56a096121", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYRES16=r3], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) 19:19:09 executing program 2: clock_gettime(0x0, &(0x7f0000000040)) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:09 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000001b80)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000700000000000000250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102917de1aab338ecedd52cbf1464bb8991b876b7c56186922447a23adbf591284ddf03479dd6d179100ceeffd4a1bb85f8851189b10a960dc56a096121", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYRES16=r3], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) 19:19:09 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0x1, r3, 0x0, 0x0, 0x1}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0x1, r3, 0x0, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:09 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000200)=0x1) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x2000, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) [ 903.842609] misc userio: No port type given on /dev/userio [ 903.855385] misc userio: No port type given on /dev/userio 19:19:09 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$sg(&(0x7f0000000280), 0x6, 0x400900) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000002740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250200000008000200030000001c000180080006000000000008000300e0000002080003007f000001080002000800000008000200030000002c000180050002000000000008000700", @ANYRES32=0x0, @ANYBLOB="05ff15906a", @ANYRES32=0x0, @ANYBLOB="0500020043000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000) write$FUSE_WRITE(r4, &(0x7f0000000340)={0x18, 0x0, r5, {0xfffffffb}}, 0x18) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f00000002c0)=0xffffffff) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/368]) 19:19:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) (async) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000001b80)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000700000000000000250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102917de1aab338ecedd52cbf1464bb8991b876b7c56186922447a23adbf591284ddf03479dd6d179100ceeffd4a1bb85f8851189b10a960dc56a096121", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYRES16=r3], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) 19:19:09 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x401) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x401) (async) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040)) (async) 19:19:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0x1, r3, 0x0, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:10 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$sg(&(0x7f0000000280), 0x6, 0x400900) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000002740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250200000008000200030000001c000180080006000000000008000300e0000002080003007f000001080002000800000008000200030000002c000180050002000000000008000700", @ANYRES32=0x0, @ANYBLOB="05ff15906a", @ANYRES32=0x0, @ANYBLOB="0500020043000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000) write$FUSE_WRITE(r4, &(0x7f0000000340)={0x18, 0x0, r5, {0xfffffffb}}, 0x18) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f00000002c0)=0xffffffff) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/368]) openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) (async) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) syz_open_dev$sg(&(0x7f0000000280), 0x6, 0x400900) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) read$FUSE(r2, &(0x7f0000000700)={0x2020}, 0x2020) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000002740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250200000008000200030000001c000180080006000000000008000300e0000002080003007f000001080002000800000008000200030000002c000180050002000000000008000700", @ANYRES32=0x0, @ANYBLOB="05ff15906a", @ANYRES32=0x0, @ANYBLOB="0500020043000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) write$FUSE_WRITE(r4, &(0x7f0000000340)={0x18, 0x0, r5, {0xfffffffb}}, 0x18) (async) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f00000002c0)=0xffffffff) (async) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x1) (async) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/368]) (async) 19:19:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) socket$nl_generic(0x10, 0x3, 0x10) (async) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) 19:19:10 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x8000000000000001, 0xb0b00) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x9705, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r2, 0x9, {0x0, 0x0, 0x0, 0x3f, 0xc1, 0x0, 0x6, 0x11, 0x5, "d02c58ed19100e71ce745036f6a31d9f9077dcb4aa8898d9755a87f752baa9008581315a68d7b1c5d30ba2310d8fb87015219c91fc5e1dccffcac010eff5fc1c", "b8e9a2c99075e5e247ce95d2bbaa238e524163525e5825afdaa5a82b11a0bde917d94724801d1396773f78d28bef2fc74ab21a7119af6fbfd4bc90efdc28c126", "dac5de473d7a9b4e534b2c31d5a67568234cdb432d4549f5745f3e7f76367fc2", [0x778a, 0x80000000]}}) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) 19:19:10 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000200)=0x1) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x2000, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r2, 0x2, 0xff, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd2c, 0x1, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x40080) 19:19:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) 19:19:10 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x8000000000000001, 0xb0b00) (async) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x8000000000000001, 0xb0b00) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x9705, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r2, 0x9, {0x0, 0x0, 0x0, 0x3f, 0xc1, 0x0, 0x6, 0x11, 0x5, "d02c58ed19100e71ce745036f6a31d9f9077dcb4aa8898d9755a87f752baa9008581315a68d7b1c5d30ba2310d8fb87015219c91fc5e1dccffcac010eff5fc1c", "b8e9a2c99075e5e247ce95d2bbaa238e524163525e5825afdaa5a82b11a0bde917d94724801d1396773f78d28bef2fc74ab21a7119af6fbfd4bc90efdc28c126", "dac5de473d7a9b4e534b2c31d5a67568234cdb432d4549f5745f3e7f76367fc2", [0x778a, 0x80000000]}}) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) 19:19:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) 19:19:10 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000200)=0x1) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x2000, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r2, 0x2, 0xff, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd2c, 0x1, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x40080) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240), 0x0, 0xa}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r2, 0x2, 0xff, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd2c, 0x1, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x40080) (async) 19:19:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) [ 904.148188] misc userio: Can't change port type on an already running userio instance 19:19:10 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x3) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x8000000000000001, 0xb0b00) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x9705, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r2, 0x9, {0x0, 0x0, 0x0, 0x3f, 0xc1, 0x0, 0x6, 0x11, 0x5, "d02c58ed19100e71ce745036f6a31d9f9077dcb4aa8898d9755a87f752baa9008581315a68d7b1c5d30ba2310d8fb87015219c91fc5e1dccffcac010eff5fc1c", "b8e9a2c99075e5e247ce95d2bbaa238e524163525e5825afdaa5a82b11a0bde917d94724801d1396773f78d28bef2fc74ab21a7119af6fbfd4bc90efdc28c126", "dac5de473d7a9b4e534b2c31d5a67568234cdb432d4549f5745f3e7f76367fc2", [0x778a, 0x80000000]}}) (async) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) 19:19:10 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (rerun: 32) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) (async) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (rerun: 32) syz_open_dev$sg(&(0x7f0000000280), 0x6, 0x400900) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async, rerun: 32) read$FUSE(r2, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 32) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000002740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250200000008000200030000001c000180080006000000000008000300e0000002080003007f000001080002000800000008000200030000002c000180050002000000000008000700", @ANYRES32=0x0, @ANYBLOB="05ff15906a", @ANYRES32=0x0, @ANYBLOB="0500020043000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async, rerun: 64) write$FUSE_WRITE(r4, &(0x7f0000000340)={0x18, 0x0, r5, {0xfffffffb}}, 0x18) (rerun: 64) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f00000002c0)=0xffffffff) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/368]) 19:19:10 executing program 1: ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x75) socket$nl_generic(0x10, 0x3, 0x10) 19:19:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8}, 0x10) 19:19:10 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r1, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000440)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000004c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, 0x1f}, {0xa, 0x4e24, 0xd1, @mcast2, 0x3}, r3, 0x8}}, 0x48) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:10 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000240)=0x2) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000380)={{0x2, 0x0, 0x80, {0x5000, 0x100000, 0x2}}, "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", "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"}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x70bd24, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x40010) 19:19:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240), 0x0, 0xa}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r2, 0x2, 0xff, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x19dcf1edc2d215ed) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd2c, 0x1, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x40080) 19:19:10 executing program 1: ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x75) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 19:19:10 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r1, 0x2}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000440)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000004c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, 0x1f}, {0xa, 0x4e24, 0xd1, @mcast2, 0x3}, r3, 0x8}}, 0x48) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8}, 0x10) 19:19:10 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000240)=0x2) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async, rerun: 64) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000380)={{0x2, 0x0, 0x80, {0x5000, 0x100000, 0x2}}, "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", "93071e7576f6fc311bb11e1a51339f890835d2d1519f0ad1d52d047da5b449a7dc15a0a7c425165f5e63dd5b8012b610cfa8dd782f6362d69ff18c9223a8f9a9eef4655e89a5953f0d47ddb45a88a6628a00b344b15c150aaaa8afe191238242d4887f1555a57f757c85ba161b483294b9ae679c188623d7d539542cd3284dfea1e1b094a545c44f07ed5bc4feed8ae107a81f475a93b65b02771a5943e7139ee24f1fd963bdf99d5248b73bc91a1f5e46c834dcae19a70276e4793663fede1052e35207a5878f7831c9bde63551c3c498ce105e22066bccf27a4e80548afdd08844235aab0937ee2d0535e480485d6f405fc76ab77183874a7bbc23c634de583b6e7837227b7c11304675851ac22b0a938b6e2af4a0fd3f0a402001886968b0b16db8723ed3fd87f5a2b934fab328c23c17259468e2db94b4cdf4ccb069f189beb834fbee19a266c9accc586c6ef43114d2175159224d4c3d309c74a98866afc229ca280e00103bd1247d651bac01ab2d976ab97d5b431a45810a864d931dc487132c60d42e66437d5da78107f86d617d6214c444ffd6b2de9a743ca689e9bbe458b77c05f252de2ce8fa19dbb5dedb4048a953641e48fe3f8d1b4cd17c3b5a976e27eacb9c6a4685247143c5506346619b54c3826081b1bca55d13eb77cdf26d69cac6c6e56ccf7f117cb86484478161214f7c0af811f759de666fbd44595f7745106c80c5945296930ca8dbef384400bec0d493de4d00bfca989d36d60fe8ee9c3bb54616641e15809190b8c5126574b08140ce0863d174e3d8eee2e5b1e0cc6225a3036e8ee8518fe5c349cf87f4670bf847fe8040ae4f7d83c6f26825873833478d48555469fd5c4aeda749126ee495fb1cc718d1e569d6a222196554dec1cd3f2fde93baa27d23dc8a9903a4ec6d658b5cc3360405340aefca2901a25b56e2c19d6ada3fe3fabb4ecfc44dec74bb979d68d81afdfd87dcca8c3d5ef7b263c05dfff9e493c484faa336950411f409fe0a3f70ef74407fd950456b124f05281130fa0847b0889f176a5b017659d59a8cb024597c416f469a6ac09f77232ad181fbb33a04956440101a308adda3a028ac22be8528c80a370fc96fa7b9008b2753c6655c23577fc97cb0cdeff99ba8b7fefa5dbcb1e256996301e51bb5959baa980a2c4a06f691d6a9c858363f54f13f94ccdc1486f6d9630eb3abf82827c363df421bc37b9170f5c4029d891e72b913a75d3c2e45955faa1e5ed35610f9c3db9d073af0c49fc688220b9cd6422790f5e661a711ba276f7072ef8cf48a8d62a5a1617a75669cceb101625c381e32b62d6d341ac0b8267c13962ff8572afcaf9e86bfab68e956cf210541e6383f0a244acd79da5a3dfed9468e81f0cab2c99807355fde6ed632f19d275a583dd873cc673cd675fadff98e23135411e5eb323d2d5109b617ac5b6d5841b345757e5364737bd560d18302d5f15b5cebacc5373a0e4f96ee5bf06e4d2ea8538ec00a0061277c1649c5ded5132426909c45bdec081182c4c14329816267151b666a6236f7bdf91515255cfd4f6f3d19869c909ecc3750004ca1a8d88c6c6fb78f9b316c288223b4d6f9117b513a8d623973980660554f5da4529264aadf3baf169869756e745cded642539614aa6011ed818822f4f21a8a6516a0a278fe5536385b7b7ff46d9de960fab514ec4b34c855c45ea66be975fb7c70142124d95d83d7416999e1449aa287c43acfbfa5c4285b4b8d1dcbf189fc586e15e07cfc22191af36f9e36fe9391231572dc67fb8df1845adf33caae29da405039c2f44971e3195fd25fedd5cbbae2d014a9e34922cdf1a36c30b624d17acf44654887d09592f2f0bdb94039198f07ddcf30ee277fedbea00f0f297357771f907567742a8f8292129f928695c2a61d3e8499c7fcd2d6bbde8e8d0878b8ad4f1abac03d60896da3633f30c6785a0f86746ab2109c36df5e499bbc947b498811fa509044ceeb5b52320e40be5e50ad1a5535e9fd0de121cacb2d0420067e8928dc39e56dbd73b8482cd6796288bef69eeb0d7a0687b2012e60833fe2d4b0b9acdb8c260ab14dd151733717b91247b12ac20574cc433731d9e83a2c747e4cd4924c640158e1b160ff9d731d12b253310e13958450efebaf0da580d144d7600d0789b2408d695ee92aa28c966138e3439bf977b6d68a796a3a445b81fe74957722cb27e3cbe88b090630ae917b849eabd50c433e8e1551855da4b956c17599f7fdde10c1ce1582d72b9614db776649cd71ff8a048a887fa0677d45dcc0d89e78beca99f2f109b0174c3931f200834e187ed31d90b299bd751a689b7a3f160e486a76e3b8e1b8efc49f694afde31192934eefcf63b56b5e88a10f1f1652412311f043d797511329478c2d0224c1191b94ae85da8854abd7f955d8cba2b1b2880b9846c49ae7753e419c60cdabc1068986b2be56de6197138645ea7a986d0970eb03bd27b05408f24dc9425ea8a0d15c2217e6e278acb8f29ee287c067102c3cb848aeb50e83a625240b8924753ee1c1c008bc9e9e8bc231b3ae8848f880d63360b4b01b9b8f340d50aba4dd3dc598161c3b5d9ae6898f11e754934e79830580f71aeaedbf3ab12f6c79cc43ef555507bc0d6fba77bd5b0706310bcade8aa0408a1dabc17e4dfc6b98ff39dd33b28b928049d3737d3b14d6a2bbb86ae817d2fd1d5de31ba460472caf65d822dcb458a516253aa7d1df60a6ae64ae7873703b88b223c457438e44edf09b40a1a6ab14e8414f74dc9f9423eae4261aba0a9d7ac66bae694518e9de187a5d9509921a0bc10f8002f9d4361d559d8b381c62260a8e9a81034e9bac4cf365b9532b39f7bdb68a4139a625be3529bd19f7477eaf1f5b85ff50cb50361f713acbb80123f0cf23dba45529bb9535a854858ec80749ee9b6d9b95e3a84fd9948327e6a0020bc8875d22b924e7dec665e738e6d052bc116ca8689f5ff3c73af01085c8b1612cd6378f0aaf6f3eae26603d11fa9d87c7b5620e45bfb048e11c4531a9bea12c166de4db8395619709c666a6dc5bbbdba74703b54b70b63f65c71dddd3694ae66cb57dd329a022a9b9b2cc89531e2fe4524d50a3f435fc75e66238d144798af0d9ba08fab1aec8e1cc0de5556ee01d627f498ca60be967cea8453b361d570cbb8eeb93453ecbf9f7b2a65333e3f81048a829542c8663bbda8d26e1f406d5360073b99ddd8a506704060bd49475d96a7d7a1acfa6cd18d1f739e77db5ea1b1b0997cab40a0adad81ffb0d19c713965ab2d579dabb2168ef1031d47744b4523a8a0dd2754d2bf27344406360da6da27e0d0c7bb38b1a496a78efd1142e29968e71231834838e4b170babbad9d3974530c18d698f7f3dc0bdf2e4d44b6bc6356fdc6988766bcbe45d3c0b12d0f4baf2b722024acd988b9e31f1cb1617124ab9988073bd643e13e65640ce76ae727021e3cdebedad97bd17605d5ae91e4556970e843959095d13aeadbad1ee686adc0f5714901a4426a5732d15de37a6e48f4b13cfee11c9d5797f66a3e27fe7f7ef873f248d8c08f028596f5a3ede55b80c06d4c4a14e3f79662d349b3b33d446a37f48a63bfc6bc1a1e194f549f4fc6fd4167f1591625c1e1baab7661a23cba3d0a526b9835e35627350f2c2fd1488775d1c2875be97885abe1b3d262d8671037dd1b460959c6df6507a8d209133c9192d98db76cbc206f4c5c16f28ad198e2d2571143d917f9e34d3599c4d2b1df5a48c98692091b14433d5677b53288c28d0fa8f3db9ca04f61200ae8cad159f96f7da5af4c2ea8aa8f052b08610b731fd50f81b0b5492e066cddd72d91e7bbf87333b228210a4227cb8472c550e84bb262f40f41fd63a9c674f1dc3f78ed6161f12297e3b6e8275f5c8bb060b36dc44dd82404a26ba16f1c7154530becc6a005cba60396dacd90b5f32914a03290c0b68a9d73bea2611f1f134af63a31bfd740519c02d6f216144f61d7069c360032e4a6a50f179fe5f1d086708837860ab5559e9fbdd61b4a417a3742e6d48a56851486b6f6d65d09f12c30ebe79f6ca4d0f7b78d8b3d1281a3279f847b77f942b65c73ef3971555919a69d40d96b8a80f2bcf7949417aac084589a90eac79985b45e5083ae74b3e996b6c669cc577ac27a0d1dc2334194a8c3f52220474f2cc117679039a5968013e9d15c23abc2875e1cc6027e6878c2f6dc664f419f57e85d854921e796be4107933a2ba78041f3ae2cf26ed65b0d0885fb00733337aff02a1a60ada04e0a03eb84f0d8166ecf7d74df357273bd9cb9a777b2fdbfc9c718d431973cddc4407599987a31c49f1a85d122a51bf40e6c024801b4f04e35c1d740a66dee2291741003ba56a9b909e7fa198aa13d9b563c0671029f382e66e265bdf934c49703b01ee40ad07cccd9dc78683be0a54724431061edf8c2a3cf21432fe21551ef7215a0d2486f41bd9dcadc88827d59b5572ada6b8edb9857ec4fcd3cbdbce9f1e70fafe0a3ea8fcfa016f77ade3bc4224625c09d622c62a82d9eca43399a34eaed895aee7f936a39d929484ffda8fa79c75cf34c34492da84a9e5d68f70f98598fbc41eae0cfb384eb543a9a3cdf81eb6e28b75c1be667721f35847c70b9f217ca2699a8d56c207e1c02815a2379ee535f9a28bc860406031ecfcaf084a434f42472e5d7bde480d4dd6baec4cca4caeef5e55ab7b153fea499fff2c18395a91b360bdfac0e86a6cc8daeaf38a297807606486c375316d26a19bd45be6762c5324dc1dd758d83e38b3a53a905b3b4dad82dee7dbfa9fdf9817d1c7d492ec67e28f5c6b43f810133b8edf0e12a6043b164b6743bb511aa365849c3db1f7d391268dce710cc4c154c108f725a82925c4c97c7f259f15aeb2d66a42a6d7c8f54e2caf8a33fb1b9a3084a478a439b4ae127b027f00afe160f17e5b1c26bfe9c719823fb1cb60ce2d189f713d51f4015ee943c713a7cd6437b609e5c84e9eef88d63305012125e12e25023c98a080e798e8c35596ecf6dadf78c77bd48c3a8b1c3b383e9efae028dd237b1c5a62de7b68722ad6cf769b24dfd36102cc5b9340dee8c619d36fcfde1dcfb7ef68d9e2fb3f27bf4183e81cabc71b9ee7c7dc8c9a95047ce701a23f1383b3d4139972224f3d9e682cef77955388b33bd524327da9cf082af28a3880629ebc2989bf2edaffe3aba8c84f80eb5e4714f697ab53187884e6642d8d677f61bcb53303033ed55b0aac47894e368135b7433b2f2e52043b766e35047d6e654c1d7a807432c92a95d349c070e19052daa7c46c77b9aaa35b0acd0a9c5c8c2435d67bcb5a08e5afe6bf636ef5ec58834e88b296646d101dd0cffd07b3c212b20b0d34b00b543ffb81abcbfb96620bf747a759a7dc283dd31a8ae7969bea44d3ef108215590f588c141bc3d7ad0ed2bd25bbb8a8240130f14e75ee0b269bee24a81f1821174675ff6139fc9fa8a448318d4595f1ab48b0a0ed9b61a361ab1e75726ecefd5e10dd7fc3387a39768a8c6aa054e3e5c110487b6d938ce1af5a4df2749b9601118f117e47f67df8884735b496a18906c989eb471359745e08864a40d3c8b4ddd1829fde42f08b46c9b451dcb0cfe357cfd85f244c885ed123a7258f5974f0f7e06abfae408824f114ec5868052cb691513b065b16fdb5d91ddc248862eee2524c86cb50a796201871df18de3fd93b006897badc8277e5f03d66f81d44a349bb8e89153a4294997a87d8612760bee49ef3b22b08f1d0d77a85c95d2791"}) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x70bd24, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x40010) (rerun: 32) [ 904.307273] misc userio: Begin command sent, but we're already running [ 904.334508] misc userio: Begin command sent, but we're already running 19:19:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8}, 0x10) 19:19:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0), 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x0, {0x7200000, 0x7, "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", 0x2, 0x4, 0x1, 0x80, 0x80, 0xea, 0x20}, r2}}, 0x128) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x5, 0x101000) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000080)=0x8) [ 904.382644] misc userio: Begin command sent, but we're already running [ 904.402626] misc userio: Begin command sent, but we're already running [ 904.410693] misc userio: Begin command sent, but we're already running [ 904.418313] misc userio: Begin command sent, but we're already running [ 904.446441] misc userio: Begin command sent, but we're already running [ 904.466542] misc userio: Begin command sent, but we're already running [ 904.473996] misc userio: Begin command sent, but we're already running [ 904.481396] misc userio: Begin command sent, but we're already running [ 904.500566] misc userio: Begin command sent, but we're already running [ 904.507279] misc userio: Begin command sent, but we're already running [ 904.519678] misc userio: Begin command sent, but we're already running [ 904.526389] misc userio: Begin command sent, but we're already running [ 904.533911] misc userio: Begin command sent, but we're already running [ 904.541043] misc userio: Begin command sent, but we're already running [ 904.547734] misc userio: Begin command sent, but we're already running [ 904.554841] misc userio: Begin command sent, but we're already running [ 904.562033] misc userio: Begin command sent, but we're already running [ 904.568728] misc userio: Begin command sent, but we're already running [ 904.575777] misc userio: Begin command sent, but we're already running [ 904.582817] misc userio: Begin command sent, but we're already running [ 904.589607] misc userio: Begin command sent, but we're already running [ 904.596538] misc userio: Begin command sent, but we're already running [ 904.603475] misc userio: Begin command sent, but we're already running [ 904.610221] misc userio: Begin command sent, but we're already running [ 904.616923] misc userio: Begin command sent, but we're already running [ 904.623670] misc userio: Begin command sent, but we're already running [ 904.630460] misc userio: Begin command sent, but we're already running [ 904.637123] misc userio: Begin command sent, but we're already running [ 904.643892] misc userio: Begin command sent, but we're already running 19:19:10 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xca880, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040), 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000180), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0xdb}, 0x2) 19:19:10 executing program 1: ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x75) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x75) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 19:19:10 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) (async, rerun: 32) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (rerun: 32) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r1, 0x2}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000440)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000004c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, 0x1f}, {0xa, 0x4e24, 0xd1, @mcast2, 0x3}, r3, 0x8}}, 0x48) (async, rerun: 64) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) (rerun: 64) 19:19:10 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000240)=0x2) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async, rerun: 64) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000380)={{0x2, 0x0, 0x80, {0x5000, 0x100000, 0x2}}, "8421ba28e6fec6737bae1bc20366334373bf357a87e19cf291c0b497b7d372f2a20a50f239d6a3673f8cf49d3f8892120ceb7837e9adb86d57d519da36deb644902c1d2da5767af5d6b5d9ea33d2803024264a7b142b5fe386c94b856487643bca965b1a8cb16d52b5edb089a8e183e0c300b418ebba217f6f988f237ef776dedd4a22d00630f9105976e9ec964446a5cb908b1353279875cdd4301623929489ba054e7010670dcf98d09287cc72ff24daa9c7d9583e23d5fc1363c11822388e2ae7085925c8e344357516c8dde28bc6cac28d69a863ea6ec2cf8bb2fda3035f1295f282f5918b924692216d4ff76f142d0c22d12c1511fc305d437c9e546a74be172e450df31aa8072d084b8f6b04966b16dff2b2499d6cbf750a649dcfe93b31aa17205a1b7679a27746ab56593235d33730b508d8a2ccf49c2e960fa9466735cd16bf5767a4d5efea60a9948f5e7f7cd1bc4bc6c1040f008a4771aa260e49c2800d9ba12a08750e85a8a89dcf311cd114cfac3dc195906fa167651018bc61c942794cafbc80fa3a2c026d0f0277b4060dd3d7f4394dc4467b194587e5219e5b74ea0d4fa85b205c00da5f55b082853daa805e207a062137fef856f616bdbf60200991cb0f640949ae79abc9372bc7200c1110900e33feb447467bc7463480038acb88d0478b4937b5a742035918bfb80d461b0f4ef4dc627d0d8998ab77050b62d36acf71eb6a66a411398527126e6cb33f6ee1bc1553eadf911236d52f9d68a02e8eefab5c2621afcce9985ebf47fe595d85552c9bbdf5cc10ca74c25c998be097959c43dcf78f59ce1c5e5f75a2b00933ff5ce163387436c63055a2eee3a137f9a24a8c3480be1c4c4ad8dd698209f8fa947c3d1d9a36c31c607b0fc1d42622060982e129d41d633fa6eda22ac94d427963fa682ad7d05307384cc54608e0243b794e6e2e237920654c17081545c4a6f0ff39ae8ce1eaa7863fe6baec4d1b99c50d108dcdbc0ee888a13879f781bf1438f44bed8fd3a1d9d2f8a24015081243dc1741891e8c759e34ddc00decff118f9e1eaf68bd581d67cccbd498e3d2c5067d56831d1d8dacf504dafb98cf51afd23b2ba9f246e77ec9662a5bbeb63d55750d6437c5014ac900a86ef5c19bf95ff609d6f1d91a1ff6ad61c98c9bbed1ddf1db5216e1bee24f163a60c1e4d689a6aeb1c3abad400d54d3d56d70c8d334b9df4f41f3768a6a657d81559b5a385af98129acebe7f9f4f5c981e91ac1199a2c201955b0f3b7c0117c6e73b9ae45950b57d80fe125ae1d704bf94e50340a60976302d1cb9f3d19c130fd9bc8aa45c3d99d6f013a527e2fadc0920f722651d8c5d141922942249b679250240e17d6be61eb4503cfa51d3c5e764d98baf5dbc1c33861e8b1cce8c900a446e1fa1af41c16e51bd0508e4e65078ee4bbc3e1ab4774fb9cedc70b891959f8c6217b571d207d46659dd08a3f558ba44cfbf1b9573072b864063b0dfc9096f8742f618786d64966869e736ac4b692107c6fb529429f842a7fd91e7c2351d49df06522a55a76df230deba10bbd215f5da0d20b38e9e2eb791880349618a6b2660d5b94823740e7f94e31fe09ca744af690b82bcaf7a1fa270f1857480e1ba3c2b21948d90817f48aa56e814cb0ac8c2246e2361547d175a3ec7452be1c3e763f6758aec6d6bb6acb635eb22ed7b2508760523eb78de7fad33fb98e6fd33c4cfa0b6aeddca95bd0c066bdd047dc5a5e84f2cc33d0ebfce068f4c8e4f87a3b9f9d1d3b3be4be28043c9b5c50dba3b81c07dc93a74123d540515f693f7fb2c7856ddbfcc3d82770ee65fad59c53ec73c1e038addb67a438ba4253752b9d474e3d13468574e83a1745abadb0f3cae09d6968f0176f7790981a267ec72791f73954c6ee3c7da129532e22492e41dbd541b9a168c5fd0578207d5d799109be98691664379b6bdb8a98b426a5c2737b7e976f1890681a4ac08db5f55d85f6ff549474f265857ac6c4579703fe01f1726704c8058b3fb406aae609d0dcbc503f2f00c3c68308c70d9eee802766972192cc70124cadd72181fa909bba0c56d53c993c2fd2ddfcad76118768237f2ba18764c905cde3252b0677d57be91517b08708eed7ccf7ab7a7865f753b877d6ed9316eb8698eb6d6f4645568b060d66fb8df564e91aa3a53eed04fd72b05399bcbeae6088177d4d2315b1ed422ff72417c1ee5405120447c4b1260623ff45231b49d9a5c48aac007a4faafe4fa7935e7cdc94e041b049ea326394a67e35f7ce5676f7ffc73981b11e29e99d4eca101139caf52f3980c2e31c1a26f566e3fb491b4813240e635f2855c20cfc51192de0cf6f0b148fe448f2efa02109f33c93d0f0bab5e6a4f0621aaebc66488116dc1c7e14c33ca1b86baee40f7d890917bb7ec70e608e5d63998f40b1ef8a6798a89b2e39397ed61fa7415a58c2e289e9eb0a5fa0b1e332bf8a08c7a5170baf783cd773afa2088bb8e62cfe341e6b5f21589664613495101eaf2ec1c24adb9a3f2cca9409d28d2aedf199334602b021ee65c095d23f45ec496ce15cccd4ffd0b16ae1098ffafa5a93826b2acc7081ada8edc76cf41c4cd8f8de3817b0ae066f18c82a1c95847942e1c5e8e43978ae3aeb03e3391f94b0e81e43f02b5539d5f8dd9e364d083e7d6da23545894599d70349a0ac65263eb60f722d9e4bc153e038b95926e76296513754e8d41190d951a8fec921abaf0d757c7ffcb86a7f383c2f7103bb62e7f409ac922de0bbd810956bcb451df854567ddd097d68b45d2ffbe683a8c53c607877f294ff046acb49a4b10c5a1c16acd0a9976788c28c1ae578d7e76ee20ab43425d6974505cf8bfcaf0ead792d49dbb36b0d17f89b33a91a283c3cdea9d69361f85c9326763b60b0ca0301d74d5d607ae4d9d7c5121b2dd69d6a2d453bfd2e0e6f17c9461a586d533d2350dd0c686d5800c83eb9ae72a1a1ec6bc3c09e4f74e2f319d0a459b07da801bfe6eeb5be32800a112e4e352e2a8f03b54852fe712e847dcb8cc481de3053ab864b775af4fc68c695ebf0585a3b32db06fb6db76e547a44c914b9f25071c777e07edd746fc1085adbe4546223bb8e29f83c5c45fd3f904f25c66a2e1bfe26b671274059315ae7bb422e434b0aa5755f5f7bdc7fe8ed838ffda0ed9a83da5295dee2cdc40d508486da52bd54c777c89bbddeed2a8b22c15f8ddf597862ae23d9b46ab85e9dbf9ad91638b2f3c235d47ec6eacaf8420d18542479c5ddaab032243ff8baa6b73722bf5cf62267272aea1863ab9d058796df500481191f6add0f60865638a5dcae12412ea2d10dbf707902b65f2751bb0b75e3b9af6ab7e2910d000ec45a24ff830af312c8fe661cfb584341ebb183bf90bfabf803c8827b30dbb0f21b09e7d1b17471c7386e204eb22f245df02d80eaeff7c35a17571a24cbbde084f4c3daac8aa0533ca84cd1a3fe78368fa8a9f90af33a4a3ca1cc399c9b6ac915fc1f966592f0796e69b7968454d31f94105e8d616fd7545e7873cd91a47c79a8002842a627a493022b3f395bd7ba8a4f3708b427a4a1bbdbc226cee5a1c87099860098da99983edf8a97c4f79beb534bb7251b4691c9466b43186ecbd2ca3f490c08c24c988af65ea2e2793adaac19a7e8bdf6062fae15545bfb8d3271ce9c25bdc7b4b2573f76b88c43a6395055e648f438425910d3e8d973a7a098bb1f87b0308d712d6f7783fbb24a9e60fdb9493dec6d30b7617b6786393f39c6cdc55b4419390fe439759883bd15e3af52cd45de37560616e0208b3a0d52c68ea1f052743afd96ed42f0bf0114c6c9bcc5b828a44592124f8e7dba23e101fd4e4b00371d7e5d672b8bfe4c798bd7fb642c9f201167fa91c5ea10bb0532eb95c6d800596b0b6b538aca366d404ed0ce08c480837416b89696206b6da7bc1d8faa234f9b092cac77752fff7da030254a8a73cac1acf6ccfdd86ae8be0449b8b3c21e515c7a8b1156752d4c0c74af8e231341312aba268bf1b0cf2888974b3c65548d708afb74accb468ab5886711b0c204fa0c8c7a12e853d674b7cd561204a5555d290a510053d502f3eaea218c676ad66d39e6727b28d07e45c49bfcc08ff54f9321f941f7922467d921d85da9a06764b1e52807e11fc1a6c38979199cdd80c1bfb3549b17dd32b428214f2e0c1a123608a4a6b19c8cb9a26326aa6e6ccba85acac6c6edff6992965981908322471df8a78e4223cf011df7eb36f64f410d522c3fdd913b1b4fcc42395bd7f374533947f6fc5d4a988b5642818d91859769f499c5a5047738f064203774a815f38dc08e2359df43b226b76baf7a3b1f6c69c2e6f43ce0bdcc8c328fc8e45727bbdf3d08963de66dd81973c64d81ab84e77c1fc78fbbda2ae368311854622bb3d684983d0f18bfc20428d46fe846914b8de09564cd6ba6127aabc2ec6fb29657eed6fc4040b074c1761b9966cb3a552d3afa333da0ac83f27b3e7469083c223ede3ac9cffbadc9e1ffee995416ee75335837d3d9334d0be6ce95d118e63a42055c4316d117a6fb48d45a36438811fbc2d6acb3cd569055d63f0db92819e6225cb80a2ca6141403b35a2f21f412c008c9c35b0eebbd03d35b5ddee5566d83b9b46424bca5fa85bbc9912165ac62c596e5453ae2db38497198472f799833408ea54b6026ba52ee49490a4a3ff29ef1978917f0dc0c8e5a775da119514269fbf3c6f667ceee85154e47b85d521d9f84ea891350a61508efa9f1d92ba33dfdbac2fa54b685e4471330f0e279fe5283c209e7d1652fbb8caa21ec6f7b9e036e65e6c171d76a092e8f179cdf78832cd52db6e010a2981a929d2b00d3cd91c6b3d7af04bb5d0d756ecb67aa7e6cee449290d36e7b448e573f86a93d8eca3524099f5587e41b3ccee5bfc81dce226c46d0b391540a029873fa21f7fc9ca95c2a2d7232872a408221073d02d0ff0f8cfeecb5e3e2ebae59c0c80d55fb467f97fa16ea1eb26a2ac0bfd0e50ab57a1e84a9e0e69d5691e5e67c584e21d3a6c4d68eceb1f3a2005771ea7fdefb0d2400d1ddbfddaffb71f4bbf18118db48b39de199742e74b9d135e9849ad17e465fbe113d79604b34d449940dcb17506996849f8b7877775edd4d989c12663a417d2f6e25cb8e3f596449504b894b8b68e0479a35c62bd7fd7492f353156bedd31226e64d7daa84532b33bd5f450f4ce42911084c112c5572bf4eaa2f58780a04194694de485f5b9781db249d3149f54a12af8443a7bd44a9f313819e6fff48ad6562391d6a9beae3677a7f0a398bd243c9900edbf8670b7f2a0642d8246fe36e183510276583a06c825e7d23cd8b2f7d0e7378943a0ff3c11db57d556e91ee54e9dfd3ade98c1e76e93e03f30ddbccd94a4c376ae322ecfa99a7b6fd225497f52ddd085f9fca74c94eb425c77ad4b53a1bdd29eac3e23968059e9acf0584cb3678d492f3597df83715df20a6876e2ddb2544147ec13214b05990ee8e9287e1e28bfc3102510f5cbd98bf28d0e683ff8271f7c8a2655a348bba8b04a23ad29595b3203a38275eb5eeee519e82ae8cc98eec6468504971717bbbf9224374945605417b2fa8d0fbb668c36564b31e026ae330bd8491990a59b04d07bf6bb06139d8c411020805b1a4150e23cf0e4890ebb7290465a883515c5cbbd283ae995128b1bc4cbde309af471c21c321d5765070b63ca9fcc4fe14885bc98fd4ecee3535adeafdb80a250d7d6f06ac0cbddb18ce7c1e1e03dd4d3f130291260ce9b3d6f9", "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"}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x70bd24, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x40010) 19:19:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0), 0x2, 0x5}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) (async, rerun: 32) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x0, {0x7200000, 0x7, "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", 0x2, 0x4, 0x1, 0x80, 0x80, 0xea, 0x20}, r2}}, 0x128) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x5, 0x101000) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000080)=0x8) 19:19:10 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$sg(&(0x7f0000000280), 0x6, 0x400900) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000002740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250200000008000200030000001c000180080006000000000008000300e0000002080003007f000001080002000800000008000200030000002c000180050002000000000008000700", @ANYRES32=0x0, @ANYBLOB="05ff15906a", @ANYRES32=0x0, @ANYBLOB="0500020043000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000) write$FUSE_WRITE(r4, &(0x7f0000000340)={0x18, 0x0, r5, {0xfffffffb}}, 0x18) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f00000002c0)=0xffffffff) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/368]) 19:19:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) [ 904.650672] misc userio: Begin command sent, but we're already running 19:19:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0), 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x2, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x0, {0x7200000, 0x7, "ec8014240b032c1f4b81f40e56e647b2ae7ba8aa735c29ab00e9bd6aab253dbf194386bf4ee5eb945965f59af15c624dc2c348824af939953be5894dfa99d087112ee859c18c55251b2a2e4fa670a34e4cca674e3bdb1e25548df6f4f83f9dd1f6a5766d7d6bf2fdc0ee001f2c3df780f49a0e32e61cef29b5f53700fb83b758c91e5eb0f8aef6207361eb934c9c5b164ab619715595a3bff24bc122230a446b37d6ac3a1b5119bb95866a743d77eb12cba7717bc1c71c67f60b575edc8ed88b7480ae47e760d31b6d2de8b0177eb8ed6c5cf1b28d87cee402f64357fc693117121862b86d4003cffc5d9c1f5decf2ef4a14bb8092541070065069ec3b877295", 0x2, 0x4, 0x1, 0x80, 0x80, 0xea, 0x20}, r2}}, 0x128) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x0, {0x7200000, 0x7, "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", 0x2, 0x4, 0x1, 0x80, 0x80, 0xea, 0x20}, r2}}, 0x128) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x5, 0x101000) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000080)=0x8) (async) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000080)=0x8) 19:19:10 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xca880, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040), 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000180), 0x2) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0xdb}, 0x2) 19:19:10 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$sg(&(0x7f0000000280), 0x6, 0x400900) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000002740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250200000008000200030000001c000180080006000000000008000300e0000002080003007f000001080002000800000008000200030000002c000180050002000000000008000700", @ANYRES32=0x0, @ANYBLOB="05ff15906a", @ANYRES32=0x0, @ANYBLOB="0500020043000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000) write$FUSE_WRITE(r4, &(0x7f0000000340)={0x18, 0x0, r5, {0xfffffffb}}, 0x18) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f00000002c0)=0xffffffff) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/368]) 19:19:10 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x3ff, 0x200040) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8}, 0x44050) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) [ 904.716549] misc userio: No port type given on /dev/userio 19:19:10 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r1}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) 19:19:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:10 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xca880, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040), 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000180), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0xdb}, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xca880, 0x0) (async) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040), 0x2) (async) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000180), 0x2) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0xdb}, 0x2) (async) 19:19:10 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r1}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:10 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$sg(&(0x7f0000000280), 0x6, 0x400900) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000002740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250200000008000200030000001c000180080006000000000008000300e0000002080003007f000001080002000800000008000200030000002c000180050002000000000008000700", @ANYRES32=0x0, @ANYBLOB="05ff15906a", @ANYRES32=0x0, @ANYBLOB="0500020043000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000) write$FUSE_WRITE(r4, &(0x7f0000000340)={0x18, 0x0, r5, {0xfffffffb}}, 0x18) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f00000002c0)=0xffffffff) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/368]) 19:19:10 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x3ff, 0x200040) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8}, 0x44050) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) 19:19:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (rerun: 64) 19:19:10 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x3ff, 0x200040) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8}, 0x44050) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) 19:19:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x1}}, 0x20) (async, rerun: 64) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:10 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r1}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:10 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$sg(&(0x7f0000000280), 0x6, 0x400900) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000002740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250200000008000200030000001c000180080006000000000008000300e0000002080003007f000001080002000800000008000200030000002c000180050002000000000008000700", @ANYRES32=0x0, @ANYBLOB="05ff15906a", @ANYRES32=0x0, @ANYBLOB="0500020043000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000) write$FUSE_WRITE(r4, &(0x7f0000000340)={0x18, 0x0, r5, {0xfffffffb}}, 0x18) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f00000002c0)=0xffffffff) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x1) 19:19:11 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x391281, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000080)=0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x40}, 0x2) 19:19:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:11 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x104}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x1000, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:11 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x1}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:11 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$sg(&(0x7f0000000280), 0x6, 0x400900) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000002740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250200000008000200030000001c000180080006000000000008000300e0000002080003007f000001080002000800000008000200030000002c000180050002000000000008000700", @ANYRES32=0x0, @ANYBLOB="05ff15906a", @ANYRES32=0x0, @ANYBLOB="0500020043000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000) write$FUSE_WRITE(r3, &(0x7f0000000340)={0x18, 0x0, r4, {0xfffffffb}}, 0x18) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f00000002c0)=0xffffffff) 19:19:11 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x391281, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000080)=0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x40}, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x391281, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000080)=0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x40}, 0x2) (async) 19:19:11 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$sg(&(0x7f0000000280), 0x6, 0x400900) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000002740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250200000008000200030000001c000180080006000000000008000300e0000002080003007f000001080002000800000008000200030000002c000180050002000000000008000700", @ANYRES32=0x0, @ANYBLOB="05ff15906a", @ANYRES32=0x0, @ANYBLOB="0500020043000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000) write$FUSE_WRITE(r4, &(0x7f0000000340)={0x18, 0x0, r5, {0xfffffffb}}, 0x18) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f00000002c0)=0xffffffff) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x1) 19:19:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x60, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x40001) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180027347d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x44801) 19:19:11 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x104}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x104}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x1000, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:11 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$sg(&(0x7f0000000280), 0x6, 0x400900) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000002740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250200000008000200030000001c000180080006000000000008000300e0000002080003007f000001080002000800000008000200030000002c000180050002000000000008000700", @ANYRES32=0x0, @ANYBLOB="05ff15906a", @ANYRES32=0x0, @ANYBLOB="0500020043000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000) write$FUSE_WRITE(r3, &(0x7f0000000340)={0x18, 0x0, r4, {0xfffffffb}}, 0x18) 19:19:11 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x0) getpeername$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0xffffff5b) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r8, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20020000}, 0xfffffffffffffef2, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYRES16=r8, @ANYBLOB="4e2d73e9ced338a9ebda", @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="50000180140900001200000000000000000000000000000108000700", @ANYRES32=r7, @ANYRES64=r2], 0xe0}, 0x1, 0x0, 0x0, 0x2004a004}, 0x8004) 19:19:11 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$sg(&(0x7f0000000280), 0x6, 0x400900) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000002740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250200000008000200030000001c000180080006000000000008000300e0000002080003007f000001080002000800000008000200030000002c000180050002000000000008000700", @ANYRES32=0x0, @ANYBLOB="05ff15906a", @ANYRES32=0x0, @ANYBLOB="0500020043000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000) write$FUSE_WRITE(r4, &(0x7f0000000340)={0x18, 0x0, r5, {0xfffffffb}}, 0x18) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f00000002c0)=0xffffffff) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x1) 19:19:11 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x391281, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) (async) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000080)=0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x40}, 0x2) 19:19:11 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$sg(&(0x7f0000000280), 0x6, 0x400900) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000700)={0x2020}, 0x2020) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000002740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250200000008000200030000001c000180080006000000000008000300e0000002080003007f000001080002000800000008000200030000002c000180050002000000000008000700", @ANYRES32=0x0, @ANYBLOB="05ff15906a", @ANYRES32=0x0, @ANYBLOB="0500020043000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 19:19:11 executing program 2: openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x703c00, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080)={0x0, 0xf9}, 0x2) 19:19:11 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$sg(&(0x7f0000000280), 0x6, 0x400900) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000002740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250200000008000200030000001c000180080006000000000008000300e0000002080003007f000001080002000800000008000200030000002c000180050002000000000008000700", @ANYRES32=0x0, @ANYBLOB="05ff15906a", @ANYRES32=0x0, @ANYBLOB="0500020043000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000) write$FUSE_WRITE(r4, &(0x7f0000000340)={0x18, 0x0, r5, {0xfffffffb}}, 0x18) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f00000002c0)=0xffffffff) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x1) 19:19:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x60, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x40001) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180027347d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x44801) 19:19:11 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x104}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x1000, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:11 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$sg(&(0x7f0000000280), 0x6, 0x400900) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000700)={0x2020}, 0x2020) 19:19:11 executing program 2: openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x703c00, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080)={0x0, 0xf9}, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x703c00, 0x0) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080)={0x0, 0xf9}, 0x2) (async) 19:19:11 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x0) (async) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x0) (async) getpeername$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0xffffff5b) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) (async) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r8, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20020000}, 0xfffffffffffffef2, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYRES16=r8, @ANYBLOB="4e2d73e9ced338a9ebda", @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="50000180140900001200000000000000000000000000000108000700", @ANYRES32=r7, @ANYRES64=r2], 0xe0}, 0x1, 0x0, 0x0, 0x2004a004}, 0x8004) 19:19:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x60, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x40001) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180027347d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x44801) 19:19:11 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x1, 0x13c, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x1}}}, 0x128) 19:19:11 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$sg(&(0x7f0000000280), 0x6, 0x400900) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000002740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250200000008000200030000001c000180080006000000000008000300e0000002080003007f000001080002000800000008000200030000002c000180050002000000000008000700", @ANYRES32=0x0, @ANYBLOB="05ff15906a", @ANYRES32=0x0, @ANYBLOB="0500020043000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000) write$FUSE_WRITE(r3, &(0x7f0000000340)={0x18, 0x0, r4, {0xfffffffb}}, 0x18) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f00000002c0)=0xffffffff) 19:19:11 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$sg(&(0x7f0000000280), 0x6, 0x400900) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 19:19:11 executing program 2: openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x703c00, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080)={0x0, 0xf9}, 0x2) 19:19:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000280), 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x14000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x164}}, 0x20000044) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4c}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000014}, 0x48004) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000640)='connect aa:aa:aa:aa:aa:10 2', 0x1b) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20002008}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x74, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40c4}, 0x8885) 19:19:11 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$sg(&(0x7f0000000280), 0x6, 0x400900) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000002740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250200000008000200030000001c000180080006000000000008000300e0000002080003007f000001080002000800000008000200030000002c000180050002000000000008000700", @ANYRES32=0x0, @ANYBLOB="05ff15906a", @ANYRES32=0x0, @ANYBLOB="0500020043000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000) write$FUSE_WRITE(r3, &(0x7f0000000340)={0x18, 0x0, r4, {0xfffffffb}}, 0x18) 19:19:11 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x0) (async) getpeername$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0xffffff5b) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r8, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20020000}, 0xfffffffffffffef2, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYRES16=r8, @ANYBLOB="4e2d73e9ced338a9ebda", @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="50000180140900001200000000000000000000000000000108000700", @ANYRES32=r7, @ANYRES64=r2], 0xe0}, 0x1, 0x0, 0x0, 0x2004a004}, 0x8004) 19:19:11 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x1, 0x13c, "356f994cc47e2455e62286e9c548c405000000000000006c57af9242fd60b493dd6b1fb3b6134c25fb579a8fb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33ec3ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e100000002b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a500", 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x1}}}, 0x128) 19:19:11 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$sg(&(0x7f0000000280), 0x6, 0x400900) 19:19:11 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000080)={0x0, 0x9}, 0x2) 19:19:11 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$sg(&(0x7f0000000280), 0x6, 0x400900) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000700)={0x2020}, 0x2020) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000002740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250200000008000200030000001c000180080006000000000008000300e0000002080003007f000001080002000800000008000200030000002c000180050002000000000008000700", @ANYRES32=0x0, @ANYBLOB="05ff15906a", @ANYRES32=0x0, @ANYBLOB="0500020043000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 19:19:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) (async) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000280), 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x14000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x164}}, 0x20000044) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4c}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000014}, 0x48004) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) (async) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000640)='connect aa:aa:aa:aa:aa:10 2', 0x1b) (async) write$6lowpan_control(r4, &(0x7f0000000640)='connect aa:aa:aa:aa:aa:10 2', 0x1b) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20002008}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x74, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40c4}, 0x8885) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20002008}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x74, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40c4}, 0x8885) 19:19:11 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x1, 0x13c, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x1}}}, 0x128) 19:19:11 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 19:19:12 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000080)={0x0, 0x9}, 0x2) [ 905.968560] misc userio: No port type given on /dev/userio 19:19:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) (async) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000280), 0x4) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x14000) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x164}}, 0x20000044) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4c}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000014}, 0x48004) (async) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000640)='connect aa:aa:aa:aa:aa:10 2', 0x1b) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20002008}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x74, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40c4}, 0x8885) 19:19:12 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$sg(&(0x7f0000000280), 0x6, 0x400900) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000700)={0x2020}, 0x2020) 19:19:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:12 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:12 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x4, @loopback, 0xfffffffa}, {0xa, 0x4e20, 0x7ff, @local, 0x20}, r1, 0x4a}}, 0x48) 19:19:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="10b225d268d7ccbffa0e56ff3f53cbe3a683888da26746f9b2a20aa8e64de80ff81683bef72ffe2becf3ebf573c5045e2369b68bc47858672c3eabc021761a449765e85be5efca31655b46c676e49467385ab417c2ba8587fe9a80858f351d", 0x5f}) 19:19:12 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000080)={0x0, 0x9}, 0x2) 19:19:12 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$sg(&(0x7f0000000280), 0x6, 0x400900) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) [ 906.097187] misc userio: No port type given on /dev/userio 19:19:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x10}}, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0xa}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (async) 19:19:12 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:12 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x4, @loopback, 0xfffffffa}, {0xa, 0x4e20, 0x7ff, @local, 0x20}, r1, 0x4a}}, 0x48) 19:19:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="10b225d268d7ccbffa0e56ff3f53cbe3a683888da26746f9b2a20aa8e64de80ff81683bef72ffe2becf3ebf573c5045e2369b68bc47858672c3eabc021761a449765e85be5efca31655b46c676e49467385ab417c2ba8587fe9a80858f351d", 0x5f}) 19:19:12 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xca880, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f00000001c0)) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040), 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000180), 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x44000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000000c0)=ANY=[@ANYBLOB="360000000000000000000000000000000000000000000000000000000000800000000000000000009f8faa1c5255d73a3e9709de7cea193328c9af3371c81d60ccecc8af5bee57fd3e94000000000000000000006a00afec26c46e6d4f36718f359ed8392a4130d600000000000000001c0c0dbae14923ffffda160c4c24096b63b6"]) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000080)={0x0, 0x7f}, 0x2) socket$inet_udp(0x2, 0x2, 0x0) 19:19:12 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) [ 906.221660] misc userio: No port type given on /dev/userio 19:19:12 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$sg(&(0x7f0000000280), 0x6, 0x400900) 19:19:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="10b225d268d7ccbffa0e56ff3f53cbe3a683888da26746f9b2a20aa8e64de80ff81683bef72ffe2becf3ebf573c5045e2369b68bc47858672c3eabc021761a449765e85be5efca31655b46c676e49467385ab417c2ba8587fe9a80858f351d", 0x5f}) 19:19:12 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x4, @loopback, 0xfffffffa}, {0xa, 0x4e20, 0x7ff, @local, 0x20}, r1, 0x4a}}, 0x48) 19:19:12 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xca880, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f00000001c0)) (async) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040), 0x2) (async) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000180), 0x2) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x44000) (async) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000000c0)=ANY=[@ANYBLOB="360000000000000000000000000000000000000000000000000000000000800000000000000000009f8faa1c5255d73a3e9709de7cea193328c9af3371c81d60ccecc8af5bee57fd3e94000000000000000000006a00afec26c46e6d4f36718f359ed8392a4130d600000000000000001c0c0dbae14923ffffda160c4c24096b63b6"]) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000080)={0x0, 0x7f}, 0x2) socket$inet_udp(0x2, 0x2, 0x0) 19:19:12 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 19:19:12 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) 19:19:12 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r3}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x0, {0x800, 0x6, "01b46514e80fe28ceeb8e2b0cce3fd5a0fcee83ce4f1c71964297dd4002e78b5089a5297c44026aa23a3a0bcf9883e14338c3615c3bb9ceba85ae0a1fc9cdc46a8a36b69ea3e9bee0394ef9fecbf1a86bc1003cc0c09bfd4f93c9a1799f3c26ce88993521aa84c28fa870bda7d38919300da8c29c0cffa9f81f2d446fcf150c2097e666f925419e454294e87a7bcdaf56539984649e33e6cc267538f5f6223e863cd81b95d7d0edc0ac523fab3e0daca054ba9f23d897755181588baceb3ced3dd3f04e9a60e406a0d61ffe985e603df5e5882b892bcb1edbc20fbc6a054a555802c5914cad187beaa33f8f359270a129b4f54a61748c38f65b6c1659fa51365", 0x1, 0x2, 0x1, 0x80, 0x2, 0x9, 0x7, 0x1}, r3}}, 0x128) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r4}}, 0x128) 19:19:12 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:12 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xca880, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f00000001c0)) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040), 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000180), 0x2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x44000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000000c0)=ANY=[@ANYBLOB="360000000000000000000000000000000000000000000000000000000000800000000000000000009f8faa1c5255d73a3e9709de7cea193328c9af3371c81d60ccecc8af5bee57fd3e94000000000000000000006a00afec26c46e6d4f36718f359ed8392a4130d600000000000000001c0c0dbae14923ffffda160c4c24096b63b6"]) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000080)={0x0, 0x7f}, 0x2) socket$inet_udp(0x2, 0x2, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xca880, 0x0) (async) sched_rr_get_interval(0xffffffffffffffff, &(0x7f00000001c0)) (async) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040), 0x2) (async) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000180), 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x44000) (async) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000000c0)=ANY=[@ANYBLOB="360000000000000000000000000000000000000000000000000000000000800000000000000000009f8faa1c5255d73a3e9709de7cea193328c9af3371c81d60ccecc8af5bee57fd3e94000000000000000000006a00afec26c46e6d4f36718f359ed8392a4130d600000000000000001c0c0dbae14923ffffda160c4c24096b63b6"]) (async) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000080)={0x0, 0x7f}, 0x2) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) 19:19:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) 19:19:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:12 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:12 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) 19:19:12 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8000, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, &(0x7f0000000ac0)) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000040)=""/214, &(0x7f0000000140)=0xd6) 19:19:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:12 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r3}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x111, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x0, {0x800, 0x6, "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", 0x1, 0x2, 0x1, 0x80, 0x2, 0x9, 0x7, 0x1}, r3}}, 0x128) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r4}}, 0x128) 19:19:12 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:12 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 19:19:12 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:12 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8000, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, &(0x7f0000000ac0)) (async) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000040)=""/214, &(0x7f0000000140)=0xd6) 19:19:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x8}}, 0xffffffffffffff92) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000240)=0x10) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 19:19:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 19:19:12 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x8}}, 0xffffffffffffff92) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000240)=0x10) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300), 0x13f, 0x8}}, 0xffffffffffffff92) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (async) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000240)=0x10) (async) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) 19:19:12 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8000, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, &(0x7f0000000ac0)) (async) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000040)=""/214, &(0x7f0000000140)=0xd6) 19:19:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) [ 906.771361] misc userio: No port type given on /dev/userio [ 906.820547] misc userio: No port type given on /dev/userio 19:19:12 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r3}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x0, {0x800, 0x6, "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", 0x1, 0x2, 0x1, 0x80, 0x2, 0x9, 0x7, 0x1}, r3}}, 0x128) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r4}}, 0x128) 19:19:12 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:12 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x6}, 0x2) 19:19:12 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000000)={0x3, 0x0, [{0x40000001, 0x1f, 0x5, 0x3, 0xffff}, {0xb, 0xb072, 0x400, 0x10000, 0x9}, {0xd, 0x0, 0x5127501e, 0x9, 0x1}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) 19:19:12 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000000)={0x3, 0x0, [{0x40000001, 0x1f, 0x5, 0x3, 0xffff}, {0xb, 0xb072, 0x400, 0x10000, 0x9}, {0xd, 0x0, 0x5127501e, 0x9, 0x1}]}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) [ 906.856248] misc userio: No port type given on /dev/userio 19:19:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x8}}, 0xffffffffffffff92) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000240)=0x10) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300), 0x13f, 0x8}}, 0xffffffffffffff92) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (async) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000240)=0x10) (async) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) 19:19:12 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:12 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x6}, 0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x6}, 0x2) [ 906.913843] misc userio: No port type given on /dev/userio 19:19:12 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:13 executing program 3: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000), 0x2) 19:19:13 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000000)={0x3, 0x0, [{0x40000001, 0x1f, 0x5, 0x3, 0xffff}, {0xb, 0xb072, 0x400, 0x10000, 0x9}, {0xd, 0x0, 0x5127501e, 0x9, 0x1}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000000)={0x3, 0x0, [{0x40000001, 0x1f, 0x5, 0x3, 0xffff}, {0xb, 0xb072, 0x400, 0x10000, 0x9}, {0xd, 0x0, 0x5127501e, 0x9, 0x1}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffd85, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) 19:19:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x4}, r3}}, 0x30) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x7, 0x0, [{0x40000000, 0x2, 0x8, 0x8, 0x3}, {0x1, 0x8, 0x9, 0xc0c4, 0x5}, {0x80000008, 0x7, 0xffff, 0x2717d8b8, 0xfffffffa}, {0x40000000, 0x3ff, 0x3, 0x3, 0x103}, {0xa, 0x80, 0x7, 0x165c4542, 0x3}, {0x1, 0xfffff752, 0x7ff, 0x101}, {0xfb11011e116912e, 0x3ff, 0x0, 0x1, 0x5}]}) [ 906.993664] misc userio: No port type given on /dev/userio [ 907.027295] misc userio: No port type given on /dev/userio [ 907.042260] misc userio: No port type given on /dev/userio 19:19:13 executing program 3: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000), 0x2) 19:19:13 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x6}, 0x2) 19:19:13 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000480)={0x6, 0xc8, &(0x7f0000000380)="6fbe984dd33c6a10bd770bfcd0779ef6f5717af196b569784bcdeb4cd86694ba2be833c9c22d8d225f966b4d515db74f305559f347ab78639a5842059ba8322cb3cc1a50759c56a221163e9f2bf8875a80a3e37e12b0a7233477ba88b9b94abf7f067bb441420acab55153fb65e21cee6a7ccd21cb82961bd1e19fd2a8af2c415102d5a8ec6955d9bd12e9a5e2bbc1e8ed5e3a88abd917cbe6d56bf334bea3b1a851528d3936d287962eb9e8bfa68e8a5ff381835b5fdc924907a89184182e4637447c56235976b3"}) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:13 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r3}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x128) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3, @loopback, 0x665d}, {0xa, 0x4e22, 0x9, @local, 0x40}, r1, 0x3c}}, 0x48) 19:19:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x4}, r3}}, 0x30) (async) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x7, 0x0, [{0x40000000, 0x2, 0x8, 0x8, 0x3}, {0x1, 0x8, 0x9, 0xc0c4, 0x5}, {0x80000008, 0x7, 0xffff, 0x2717d8b8, 0xfffffffa}, {0x40000000, 0x3ff, 0x3, 0x3, 0x103}, {0xa, 0x80, 0x7, 0x165c4542, 0x3}, {0x1, 0xfffff752, 0x7ff, 0x101}, {0xfb11011e116912e, 0x3ff, 0x0, 0x1, 0x5}]}) 19:19:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102", @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x800}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) 19:19:13 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000140)={0xf, 0x8}, 0x10) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:13 executing program 3: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000), 0x2) 19:19:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102", @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x800}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) [ 907.167621] misc userio: No port type given on /dev/userio 19:19:13 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x128) (async, rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3, @loopback, 0x665d}, {0xa, 0x4e22, 0x9, @local, 0x40}, r1, 0x3c}}, 0x48) (rerun: 64) 19:19:13 executing program 3: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:13 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000060000000900000000000000ffffff7f000000000300000000000000810000000000000052000000000000000500000000000000010000000000000004000000000000000100000000000000ffff000000000000ff07000000e28700ff030000000000000080ffff000000000900000000000000090000000000000001000000000000000900000000000000050000000000000002000000000000000700000000000000"]) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x4}, r3}}, 0x30) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x7, 0x0, [{0x40000000, 0x2, 0x8, 0x8, 0x3}, {0x1, 0x8, 0x9, 0xc0c4, 0x5}, {0x80000008, 0x7, 0xffff, 0x2717d8b8, 0xfffffffa}, {0x40000000, 0x3ff, 0x3, 0x3, 0x103}, {0xa, 0x80, 0x7, 0x165c4542, 0x3}, {0x1, 0xfffff752, 0x7ff, 0x101}, {0xfb11011e116912e, 0x3ff, 0x0, 0x1, 0x5}]}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x4}, r3}}, 0x30) (async) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x7, 0x0, [{0x40000000, 0x2, 0x8, 0x8, 0x3}, {0x1, 0x8, 0x9, 0xc0c4, 0x5}, {0x80000008, 0x7, 0xffff, 0x2717d8b8, 0xfffffffa}, {0x40000000, 0x3ff, 0x3, 0x3, 0x103}, {0xa, 0x80, 0x7, 0x165c4542, 0x3}, {0x1, 0xfffff752, 0x7ff, 0x101}, {0xfb11011e116912e, 0x3ff, 0x0, 0x1, 0x5}]}) (async) [ 907.245091] misc userio: No port type given on /dev/userio 19:19:13 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000140)={0xf, 0x8}, 0x10) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:13 executing program 3: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000229bd7000ffdbdf250700000006000e001f00000005001200060000000c000f00a1b55c32b33301000000000000800c0016000200008000000000000021000000000000000c0001000000000001000000000006001a004e2400000800180064cc7d09951f010102", @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4048054}, 0x4040801) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x800}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) 19:19:13 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:13 executing program 3: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:13 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x128) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3, @loopback, 0x665d}, {0xa, 0x4e22, 0x9, @local, 0x40}, r1, 0x3c}}, 0x48) 19:19:13 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000140)={0xf, 0x8}, 0x10) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x656, @local, 0x1}, {0xa, 0x9, 0x29d, @private1, 0x9}, r2, 0x2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 907.384816] misc userio: No port type given on /dev/userio 19:19:13 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:13 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:13 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:13 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x656, @local, 0x1}, {0xa, 0x9, 0x29d, @private1, 0x9}, r2, 0x2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:13 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r3}}, 0x18) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000480)={0xa, 0x4, 0xfa00, {r3}}, 0xc) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r6}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x4, {0x5, 0x0, "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", 0x6, 0x1, 0x1f, 0x20, 0x7f, 0x6, 0x1}, r6}}, 0x128) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x1, {0x8001, 0x5, "9a68cc450239808b53cb22ecebb49e46044ccb522f02f32bd94523e7c25971211148f1bc3bd382e07e0553e4af3bebc21ee28cbd936929f8fc25eced80abd76d4835d17267c8f37e0d4584a83ffa6d8539cfb2090495fd68abc7f18a061cf77dbea8108f3c9c79e1e00770a365fced9977be656a557b18cc33af28a630151fc4ac624cab41b2a33cf033eed59d0b252d385a19ef574a479ad342608ed542111663f28a13030bd86fd33d12fe7b84264940912dff9c9682e486f8e05bfe159766caa27c88683251c6040fb89da0e154ca33e41b12d36567643a4259bc0a8ea044f4f86a92b930688d12bbceeb31ec2ab9e077f349561953cd1ee2ca4630bc5742", 0x4, 0xf7, 0x0, 0x4, 0x20, 0x7f, 0xa3, 0x1}, r1}}, 0x128) 19:19:13 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:13 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) [ 907.561319] misc userio: No port type given on /dev/userio [ 907.573725] misc userio: No port type given on /dev/userio 19:19:13 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000100)) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x8}, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) 19:19:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x656, @local, 0x1}, {0xa, 0x9, 0x29d, @private1, 0x9}, r2, 0x2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x656, @local, 0x1}, {0xa, 0x9, 0x29d, @private1, 0x9}, r2, 0x2}}, 0x48) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (async) 19:19:13 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) [ 907.614603] misc userio: No port type given on /dev/userio 19:19:13 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:13 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:13 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000480)={0xa, 0x4, 0xfa00, {r3}}, 0xc) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r6}}, 0x18) (async) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x4, {0x5, 0x0, "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", 0x6, 0x1, 0x1f, 0x20, 0x7f, 0x6, 0x1}, r6}}, 0x128) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x1, {0x8001, 0x5, "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", 0x4, 0xf7, 0x0, 0x4, 0x20, 0x7f, 0xa3, 0x1}, r1}}, 0x128) [ 907.692261] misc userio: No port type given on /dev/userio [ 907.712709] misc userio: The device must be registered before sending interrupts 19:19:13 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000100)) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x8}, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) (async) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000100)) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000), 0x2) (async) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x8}, 0x2) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) (async) 19:19:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0xffffffff, @mcast2, 0x37}, r1}}, 0x30) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) 19:19:13 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:13 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) [ 907.757249] misc userio: No port type given on /dev/userio 19:19:13 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:13 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r3}}, 0x18) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000480)={0xa, 0x4, 0xfa00, {r3}}, 0xc) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r6}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x4, {0x5, 0x0, "bad5c7b8969092bbefefd67a174c4356368a31be89d1c52700e941a97c4fef17e881122799af461ae159bcdb350594f35295e72afd15a0d389ec7c941482818640de2da2f7bc9077e8c2733a4d90a5a012de8a35950fad58cbc3b404cbac6e57a0e484b299e563e3ae2dd79135eff14b751453da277bdfa13611ffe7a03c59909ddb100a858dc26ede1fae934e0f83c6c7b71cd115527bbbf9c6387de4558249f803e8b421276fe7a055908e1b18c3afb1377995873d50b79bae40ddf38429689c02b74c60404b8d4de993c9b8b5a3400e7fdbd5d94f0e8c2b773e2334db4bfa1e2a493108a348d0509634917bf762aa3001c05b97f66bc7dc3b38b366160789", 0x6, 0x1, 0x1f, 0x20, 0x7f, 0x6, 0x1}, r6}}, 0x128) (async) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x4, {0x5, 0x0, "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", 0x6, 0x1, 0x1f, 0x20, 0x7f, 0x6, 0x1}, r6}}, 0x128) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x1, {0x8001, 0x5, "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", 0x4, 0xf7, 0x0, 0x4, 0x20, 0x7f, 0xa3, 0x1}, r1}}, 0x128) [ 907.818931] misc userio: No port type given on /dev/userio [ 907.827966] misc userio: The device must be registered before sending interrupts [ 907.845544] misc userio: No port type given on /dev/userio 19:19:13 executing program 0: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000), 0x2) 19:19:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0xffffffff, @mcast2, 0x37}, r1}}, 0x30) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) 19:19:13 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) [ 907.882220] misc userio: The device must be registered before sending interrupts [ 907.913250] misc userio: No port type given on /dev/userio [ 907.926280] misc userio: No port type given on /dev/userio 19:19:13 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000100)) (async) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x8}, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) 19:19:13 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:13 executing program 0: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000), 0x2) 19:19:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0xffffffff, @mcast2, 0x37}, r1}}, 0x30) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) 19:19:14 executing program 0: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000), 0x2) 19:19:14 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) [ 907.997916] misc userio: No port type given on /dev/userio 19:19:14 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {r3, 0x8001}}, 0x10) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) r4 = syz_open_dev$loop(&(0x7f0000000340), 0x5, 0x200) ioctl$LOOP_CLR_FD(r4, 0x4c01) [ 908.050755] misc userio: No port type given on /dev/userio [ 908.051442] misc userio: No port type given on /dev/userio [ 908.056580] misc userio: The device must be registered before sending interrupts 19:19:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 19:19:14 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000040)={0x40000, 0x0, [0x9, 0x7f, 0x2, 0x80, 0x8, 0xffff, 0x20, 0x6]}) 19:19:14 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:14 executing program 0: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) [ 908.124222] misc userio: No port type given on /dev/userio 19:19:14 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000300)) (async) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {r3, 0x8001}}, 0x10) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) (async) r4 = syz_open_dev$loop(&(0x7f0000000340), 0x5, 0x200) ioctl$LOOP_CLR_FD(r4, 0x4c01) 19:19:14 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:14 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:14 executing program 0: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) [ 908.183298] misc userio: No port type given on /dev/userio 19:19:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (async) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 19:19:14 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000040)={0x40000, 0x0, [0x9, 0x7f, 0x2, 0x80, 0x8, 0xffff, 0x20, 0x6]}) [ 908.231742] misc userio: No port type given on /dev/userio 19:19:14 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {r3, 0x8001}}, 0x10) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) r4 = syz_open_dev$loop(&(0x7f0000000340), 0x5, 0x200) ioctl$LOOP_CLR_FD(r4, 0x4c01) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) (async) ioctl$LOOP_CLR_FD(r2, 0x4c01) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x3}}, 0x20) (async) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000300)) (async) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {r3, 0x8001}}, 0x10) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) (async) syz_open_dev$loop(&(0x7f0000000340), 0x5, 0x200) (async) ioctl$LOOP_CLR_FD(r4, 0x4c01) (async) 19:19:14 executing program 0: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:14 executing program 1: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000), 0x2) 19:19:14 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0x10) [ 908.284207] misc userio: No port type given on /dev/userio [ 908.298777] misc userio: Invalid payload size [ 908.307100] misc userio: No port type given on /dev/userio 19:19:14 executing program 1: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000), 0x2) 19:19:14 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000040)={0x40000, 0x0, [0x9, 0x7f, 0x2, 0x80, 0x8, 0xffff, 0x20, 0x6]}) openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)) (async) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000040)={0x40000, 0x0, [0x9, 0x7f, 0x2, 0x80, 0x8, 0xffff, 0x20, 0x6]}) (async) 19:19:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x7, @private2, 0x1}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:14 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) [ 908.359539] misc userio: No port type given on /dev/userio [ 908.395056] misc userio: Invalid payload size [ 908.403227] misc userio: No port type given on /dev/userio 19:19:14 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:14 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x800000, {0x0, 0x0, "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", 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:14 executing program 1: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000), 0x2) 19:19:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x7, @private2, 0x1}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:14 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:14 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x22400, 0x0) 19:19:14 executing program 1: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:14 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x800000, {0x0, 0x0, "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", 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) [ 908.501704] misc userio: No port type given on /dev/userio [ 908.512974] misc userio: Invalid payload size [ 908.536689] misc userio: No port type given on /dev/userio 19:19:14 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040), 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x7, @private2, 0x1}, r1}}, 0x30) (async, rerun: 64) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) (rerun: 64) 19:19:14 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:14 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x800000, {0x0, 0x0, "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", 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) (async) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x800000, {0x0, 0x0, "356f9967c47e2455e62286e9c5e8913faaa59c3948c44243427882c54ec26c57af9a42fd60b493dd6b1fb3b6134c25f33d7b0cb942639b0d708b75228aa2f4fccdcdfb7ddbfb9d26c33e43ef769414a4fe56657451e5d040de9c7ca88d41b5199c9b7864fb9cf6d53177888749f1770b16d079902dcf8681c4d2a7a196a3ddfd899f19d8587e8cd8aa03df2dc45961cf1f904b07beef24cf3343c5853e8ce235142b88c07c0cd413ab64c4c0909bad08801a95b997e73ef28ad6b3db7cb18d10399926c93579385b6d5c16f0218d491bf6924b3876332ac5782fd9b6aa04ac0fcfe8f8b08d075b23fa93e9b85dbd0d4f581f29ae0627a2b3aba455b3e40da5a5", 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) [ 908.623514] misc userio: No port type given on /dev/userio 19:19:14 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x22400, 0x0) 19:19:14 executing program 1: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:14 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) [ 908.667771] misc userio: No port type given on /dev/userio 19:19:14 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040), 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, r1}}, 0x30) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:14 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r2}}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x128) 19:19:14 executing program 1: r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:14 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x22400, 0x0) 19:19:14 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040), 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) [ 908.762378] misc userio: No port type given on /dev/userio [ 908.780879] misc userio: No port type given on /dev/userio 19:19:14 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r2}}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x128) 19:19:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @private2}, r1}}, 0x30) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, r1}}, 0x30) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:19:14 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:14 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000), 0x2) [ 908.828917] misc userio: No port type given on /dev/userio [ 908.841710] misc userio: No port type given on /dev/userio [ 908.842548] misc userio: No port type given on /dev/userio 19:19:14 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_IOCTL(r3, &(0x7f0000000180)={0x20, 0x0, 0x0, {0xf54, 0x4, 0x2c000, 0xd005}}, 0x20) clock_getres(0x1, &(0x7f0000000100)) syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x46000) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020}, 0x2020) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000a40)={0x23, 0x0, 0x6}, 0x10) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) r7 = accept$phonet_pipe(r6, &(0x7f00000000c0), &(0x7f00000001c0)=0x10) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r7) clock_getres(0x1, &(0x7f0000000200)) 19:19:14 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:14 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r2}}, 0x18) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x128) [ 908.923253] ================================================================== [ 908.930811] BUG: KASAN: use-after-free in __list_add_valid+0x93/0xa0 [ 908.937306] Read of size 8 at addr ffff8880b4580ad8 by task syz-executor.4/25295 [ 908.944842] [ 908.946487] CPU: 0 PID: 25295 Comm: syz-executor.4 Not tainted 4.14.305-syzkaller #0 [ 908.954371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 908.957725] misc userio: No port type given on /dev/userio [ 908.963737] Call Trace: [ 908.963761] dump_stack+0x1b2/0x281 [ 908.963777] print_address_description.cold+0x54/0x1d3 [ 908.963790] kasan_report_error.cold+0x8a/0x191 [ 908.963802] ? __list_add_valid+0x93/0xa0 [ 908.963812] __asan_report_load8_noabort+0x68/0x70 [ 908.963824] ? __list_add_valid+0x93/0xa0 [ 908.963835] __list_add_valid+0x93/0xa0 [ 908.963849] rdma_listen+0x656/0x9b0 [ 908.963864] ucma_listen+0x10b/0x170 [ 908.963876] ? ucma_bind_ip+0x150/0x150 [ 908.963889] ? _copy_from_user+0x96/0x100 [ 908.963899] ? ucma_bind_ip+0x150/0x150 19:19:15 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) [ 908.963915] ucma_write+0x206/0x2c0 [ 908.963929] ? ucma_set_ib_path+0x510/0x510 [ 909.020698] misc userio: No port type given on /dev/userio [ 909.022310] __vfs_write+0xe4/0x630 [ 909.022324] ? ucma_set_ib_path+0x510/0x510 [ 909.022335] ? kernel_read+0x110/0x110 [ 909.022350] ? common_file_perm+0x3ee/0x580 [ 909.052314] ? security_file_permission+0x82/0x1e0 [ 909.052329] ? rw_verify_area+0xe1/0x2a0 19:19:15 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:15 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) 19:19:15 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000), 0x2) [ 909.052343] vfs_write+0x17f/0x4d0 19:19:15 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x81}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) 19:19:15 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x8001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) [ 909.052359] SyS_write+0xf2/0x210 [ 909.052370] ? SyS_read+0x210/0x210 [ 909.052383] ? do_syscall_64+0x4c/0x640 [ 909.052393] ? SyS_read+0x210/0x210 [ 909.052405] do_syscall_64+0x1d5/0x640 [ 909.052422] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 909.052432] RIP: 0033:0x7f4a925e50f9 [ 909.052438] RSP: 002b:00007f4a90b36168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 909.052450] RAX: ffffffffffffffda RBX: 00007f4a92705050 RCX: 00007f4a925e50f9 [ 909.052456] RDX: 0000000000000010 RSI: 0000000020000200 RDI: 0000000000000003 [ 909.052463] RBP: 00007f4a92640ae9 R08: 0000000000000000 R09: 0000000000000000 [ 909.052469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 909.052475] R13: 00007ffd366bd8ff R14: 00007f4a90b36300 R15: 0000000000022000 [ 909.052493] [ 909.052498] Allocated by task 25254: [ 909.052508] kasan_kmalloc+0xeb/0x160 [ 909.052520] kmem_cache_alloc_trace+0x131/0x3d0 [ 909.052530] rdma_create_id+0x57/0x4c0 [ 909.052540] ucma_create_id+0x18b/0x500 [ 909.052549] ucma_write+0x206/0x2c0 [ 909.052557] __vfs_write+0xe4/0x630 [ 909.052566] vfs_write+0x17f/0x4d0 [ 909.052575] SyS_write+0xf2/0x210 [ 909.052583] do_syscall_64+0x1d5/0x640 [ 909.052593] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 909.052596] [ 909.052601] Freed by task 25247: [ 909.052609] kasan_slab_free+0xc3/0x1a0 [ 909.052618] kfree+0xc9/0x250 [ 909.052627] ucma_close+0x11a/0x340 [ 909.052636] __fput+0x25f/0x7a0 [ 909.052645] task_work_run+0x11f/0x190 [ 909.052654] exit_to_usermode_loop+0x1ad/0x200 [ 909.052662] do_syscall_64+0x4a3/0x640 [ 909.052672] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 909.052674] [ 909.052682] The buggy address belongs to the object at ffff8880b4580900 [ 909.052682] which belongs to the cache kmalloc-1024 of size 1024 [ 909.052691] The buggy address is located 472 bytes inside of [ 909.052691] 1024-byte region [ffff8880b4580900, ffff8880b4580d00) [ 909.052694] The buggy address belongs to the page: [ 909.052703] page:ffffea0002d16000 count:1 mapcount:0 mapping:ffff8880b4580000 index:0x0 compound_mapcount: 0 [ 909.052716] flags: 0xfff00000008100(slab|head) [ 909.052730] raw: 00fff00000008100 ffff8880b4580000 0000000000000000 0000000100000007 [ 909.052741] raw: ffffea0002cbdb20 ffffea0002d176a0 ffff88813fe74ac0 0000000000000000 [ 909.052746] page dumped because: kasan: bad access detected [ 909.052748] [ 909.052752] Memory state around the buggy address: [ 909.052760] ffff8880b4580980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 909.052768] ffff8880b4580a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 909.052776] >ffff8880b4580a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 909.052780] ^ [ 909.052789] ffff8880b4580b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 909.052796] ffff8880b4580b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 909.052800] ================================================================== [ 909.052804] Disabling lock debugging due to kernel taint [ 909.123933] misc userio: No port type given on /dev/userio [ 909.173635] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 909.173635] [ 909.173647] CPU: 0 PID: 25295 Comm: syz-executor.4 Tainted: G B 4.14.305-syzkaller #0 [ 909.173653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 909.173656] Call Trace: [ 909.173671] dump_stack+0x1b2/0x281 [ 909.173683] panic+0x21d/0x451 [ 909.173693] ? add_taint.cold+0x16/0x16 [ 909.173704] ? ___preempt_schedule+0x16/0x18 [ 909.173715] ? preempt_schedule_common+0x45/0xc0 [ 909.173725] ? ___preempt_schedule+0x16/0x18 [ 909.173736] check_panic_on_warn.cold+0x19/0x35 [ 909.173746] kasan_end_report+0x3a/0x40 [ 909.173755] kasan_report_error.cold+0xa7/0x191 [ 909.173765] ? __list_add_valid+0x93/0xa0 [ 909.173775] __asan_report_load8_noabort+0x68/0x70 [ 909.173785] ? __list_add_valid+0x93/0xa0 [ 909.173794] __list_add_valid+0x93/0xa0 [ 909.173807] rdma_listen+0x656/0x9b0 [ 909.173819] ucma_listen+0x10b/0x170 [ 909.173829] ? ucma_bind_ip+0x150/0x150 [ 909.173840] ? _copy_from_user+0x96/0x100 [ 909.173849] ? ucma_bind_ip+0x150/0x150 [ 909.173859] ucma_write+0x206/0x2c0 [ 909.173869] ? ucma_set_ib_path+0x510/0x510 [ 909.173882] __vfs_write+0xe4/0x630 [ 909.173891] ? ucma_set_ib_path+0x510/0x510 [ 909.173909] ? kernel_read+0x110/0x110 [ 909.173921] ? common_file_perm+0x3ee/0x580 [ 909.173937] ? security_file_permission+0x82/0x1e0 [ 909.173947] ? rw_verify_area+0xe1/0x2a0 [ 909.173958] vfs_write+0x17f/0x4d0 [ 909.173969] SyS_write+0xf2/0x210 [ 909.173979] ? SyS_read+0x210/0x210 [ 909.173987] ? do_syscall_64+0x4c/0x640 [ 909.173995] ? SyS_read+0x210/0x210 [ 909.174005] do_syscall_64+0x1d5/0x640 [ 909.174019] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 909.174026] RIP: 0033:0x7f4a925e50f9 [ 909.174032] RSP: 002b:00007f4a90b36168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 909.174042] RAX: ffffffffffffffda RBX: 00007f4a92705050 RCX: 00007f4a925e50f9 [ 909.174048] RDX: 0000000000000010 RSI: 0000000020000200 RDI: 0000000000000003 [ 909.174053] RBP: 00007f4a92640ae9 R08: 0000000000000000 R09: 0000000000000000 [ 909.174058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 909.174064] R13: 00007ffd366bd8ff R14: 00007f4a90b36300 R15: 0000000000022000 [ 909.174362] Kernel Offset: disabled [ 909.651817] Rebooting in 86400 seconds..