38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:10 executing program 4:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:10 executing program 3:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:10 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:10 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:10 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), 0x0)

03:17:10 executing program 1:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r0 = socket(0xb, 0x6, 0x6)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r2=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r0}}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r0, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:10 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x0)
socket(0xb, 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:10 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:10 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:10 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), 0x0)

03:17:10 executing program 4:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
socket(0x0, 0x0, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:10 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:10 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r1}}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r1}}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:10 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:10 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r1}}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r1}}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580))
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:10 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:10 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580))
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:11 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580))
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:11 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580))
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580))
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r1}}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:11 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:11 executing program 0:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:11 executing program 4:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:11 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r1}}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:11 executing program 1:
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:11 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000004c0))

03:17:11 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:11 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x0)
socket(0xb, 0x0, 0x0)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:11 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000004c0))

03:17:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r1}}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:11 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r1}}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:11 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000004c0))

03:17:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r1}}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:11 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, 0x0, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:11 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000004c0))

03:17:11 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000004c0))

03:17:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:11 executing program 3:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:12 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), 0x0)

03:17:12 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, 0x0, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:12 executing program 4:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:12 executing program 1:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:12 executing program 3:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:12 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), 0x0)

03:17:12 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r0 = socket(0xb, 0x6, 0x6)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, 0x0, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:12 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, 0x0, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:12 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r0 = socket(0xb, 0x6, 0x6)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:12 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), 0x0)

03:17:12 executing program 3:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, 0x0, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:12 executing program 3:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:12 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r0 = socket(0xb, 0x6, 0x6)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:12 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:12 executing program 5:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:12 executing program 5:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:12 executing program 0:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:12 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:12 executing program 5:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:12 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:12 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:12 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580), 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:12 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(0x0, r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:13 executing program 5:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580), 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:13 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(0x0, r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:13 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(0x0, r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:13 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x0)
socket(0xb, 0x6, 0x6)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580), 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580), 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:13 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x0)
socket(0xb, 0x6, 0x6)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:13 executing program 5:
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:13 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:13 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:13 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580), 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:13 executing program 1:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r0 = socket(0xb, 0x6, 0x6)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:13 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:13 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:13 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580), 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:13 executing program 1:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r0 = socket(0xb, 0x6, 0x6)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:13 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:13 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:13 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:13 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:13 executing program 1:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:13 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:13 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:13 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:13 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:13 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r0 = socket(0xb, 0x6, 0x6)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:14 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r0 = socket(0xb, 0x6, 0x6)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:14 executing program 5:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:14 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:14 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(0x0, r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:14 executing program 5:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(0x0, r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:14 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r0 = socket(0xb, 0x6, 0x6)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:14 executing program 4:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:14 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x0, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:14 executing program 5:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:14 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:14 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:14 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:14 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r0 = socket(0xb, 0x6, 0x6)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x0, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x0, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:14 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x0, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:14 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(0x0, r0)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:14 executing program 4:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:14 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000004c0))

03:17:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x0, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:14 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:14 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000004c0))

03:17:14 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:14 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000004c0))

03:17:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(0x0, r0)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x0, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:14 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:14 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:14 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), 0x0)

03:17:15 executing program 3:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x0, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:15 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), 0x0)

03:17:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:15 executing program 1:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x0, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:15 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), 0x0)

03:17:15 executing program 0:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:15 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:15 executing program 3:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x0, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x0, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x0, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x0, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:15 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x0, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:15 executing program 1:
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:15 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:15 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x0, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:15 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xb, 0x6, 0x6)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xb, 0x6, 0x6)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:16 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:16 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:16 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3a4, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:16 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xb, 0x6, 0x6)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xb, 0x6, 0x6)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:16 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3a4, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:16 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3a4, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3a4, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3a4, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:16 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:16 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3a4, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:16 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x2f0, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:16 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:16 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x2f0, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:16 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:17 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:17 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x2f0, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x2f0, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:17 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)

03:17:17 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x2f0, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x2f0, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:17 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:17 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:17 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:17 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)

03:17:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)

03:17:17 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:17 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)

03:17:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:17 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:17 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

03:17:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:18 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:18 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
restart_syscall()
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', <r1=>0x0, 0x29, 0x1, 0x64, 0x80000000, 0xf, @private1, @mcast2, 0x8000, 0x8000, 0xfffffffb, 0x40}})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@loopback, @private2, @mcast1, 0x7, 0xe, 0x8001, 0x500, 0x1f, 0x80010081, r1})
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x1, {0xfff, 0x5, 0x1, 0x9, 0x40, 0x0, 0x9, 0x5, 0x9}}, 0x43)
pipe2$9p(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80800)
write$P9_RMKDIR(r3, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x80, 0x4, 0x6}}, 0x14)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000480)={"5dee7bad8b86cb9d10c3699105fad6da", r4, 0x0, {0x5, 0x20}, {0x7, 0x3}, 0x3, [0xdfc4, 0x101, 0x0, 0x4, 0x8000000000000001, 0x100000000, 0x3ff, 0xc4a, 0x100000001, 0x101, 0x5, 0x5, 0xa1, 0x100000001, 0x9, 0xffffffffffffffff]})
r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0xfffff000, 0x10000})
write$P9_RLERRORu(r3, &(0x7f0000000600)={0x15, 0x7, 0x2, {{0x8, 'syztnl1\x00'}, 0x7}}, 0x15)
socket$packet(0x11, 0x2, 0x300)

03:17:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:18 executing program 4:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10, 0x80000)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000040), 0x10)
r1 = accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10, 0x80800)
getpeername$netlink(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan0\x00', <r3=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000180)={'gre0\x00', <r4=>r3, 0x40, 0x8000, 0xe7, 0x401, {{0x24, 0x4, 0x0, 0x2, 0x90, 0x67, 0x0, 0x7, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2c}, {[@timestamp={0x44, 0x24, 0x36, 0x0, 0x5, [0x5ebe, 0x6, 0x2, 0x0, 0xf003, 0x0, 0x2, 0x7]}, @cipso={0x86, 0x56, 0x0, [{0x1, 0x2}, {0x2, 0xa, "bec07b6ab079d391"}, {0x75076be69479b729, 0x8, "25673a0ec249"}, {0x0, 0xb, "71d864a0cdc7e5f466"}, {0x1, 0xe, "779dd8d1e07145e6dd39a8d6"}, {0x6, 0xb, "aa92ccbf5478495762"}, {0x1, 0x7, "cbf5aef117"}, {0x1, 0x11, "f385235cc04377c3a7a03c965430e8"}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', <r5=>r4, 0x80, 0x80, 0x6, 0x1f, {{0x17, 0x4, 0x1, 0x2, 0x5c, 0x68, 0x0, 0xb3, 0x29, 0x0, @loopback, @multicast1, {[@timestamp_prespec={0x44, 0x44, 0x1d, 0x3, 0x3, [{@loopback, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbdac}, {@multicast2, 0x2}, {@remote, 0x101}, {@multicast2, 0x5}, {@remote, 0xad99}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x55df}, {@local, 0x4}]}, @ra={0x94, 0x4}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'ip_vti0\x00', r5, 0x10, 0x10, 0x400, 0x10000, {{0x21, 0x4, 0x1, 0x4, 0x84, 0x66, 0x0, 0x7, 0x2f, 0x0, @local, @local, {[@timestamp_prespec={0x44, 0x4c, 0x3d, 0x3, 0x3, [{@remote, 0x3}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@empty, 0x9f8a}, {@broadcast, 0x84}, {@private=0xa010102, 0x98c}, {@remote, 0x7fffffff}, {@rand_addr=0x64010101, 0x3}, {@broadcast, 0xfffffffb}]}, @timestamp={0x44, 0x14, 0x37, 0x0, 0x4, [0x9, 0xffffffff, 0x1f, 0x3]}, @end, @end, @timestamp_prespec={0x44, 0xc, 0x6e, 0x3, 0x7, [{@multicast2, 0x81}]}]}}}}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440))
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)={'team0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'ip6_vti0\x00', r7, 0x29, 0x5, 0x0, 0xfdb, 0x12, @local, @private0, 0x1, 0x8, 0x1, 0xd6}})
r8 = socket(0x3, 0x800, 0x2d6)
sendmsg$SMC_PNETID_ADD(r8, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040801)
r9 = syz_open_dev$vcsu(&(0x7f0000000880), 0x5, 0x202101)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r8, 0x89fa, &(0x7f0000000940)={'sit0\x00', &(0x7f00000008c0)={'syztnl2\x00', <r10=>r5, 0x4, 0x0, 0x7, 0x6, 0x2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x1, 0x2, 0x17d3}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'syztnl0\x00', r10, 0x2f, 0x3, 0x1, 0x0, 0x71, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x10, 0x7, 0x7}})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r9, 0x89f4, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000a40)={'syztnl2\x00', r5, 0x29, 0x7, 0x5, 0x7, 0x4a, @empty, @local, 0x10, 0x700, 0x7f, 0x1}})

03:17:18 executing program 1:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10, 0x80000)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000040), 0x10)
r1 = accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10, 0x80800)
getpeername$netlink(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan0\x00', <r3=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000180)={'gre0\x00', <r4=>r3, 0x40, 0x8000, 0xe7, 0x401, {{0x24, 0x4, 0x0, 0x2, 0x90, 0x67, 0x0, 0x7, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2c}, {[@timestamp={0x44, 0x24, 0x36, 0x0, 0x5, [0x5ebe, 0x6, 0x2, 0x0, 0xf003, 0x0, 0x2, 0x7]}, @cipso={0x86, 0x56, 0x0, [{0x1, 0x2}, {0x2, 0xa, "bec07b6ab079d391"}, {0x75076be69479b729, 0x8, "25673a0ec249"}, {0x0, 0xb, "71d864a0cdc7e5f466"}, {0x1, 0xe, "779dd8d1e07145e6dd39a8d6"}, {0x6, 0xb, "aa92ccbf5478495762"}, {0x1, 0x7, "cbf5aef117"}, {0x1, 0x11, "f385235cc04377c3a7a03c965430e8"}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', <r5=>r4, 0x80, 0x80, 0x6, 0x1f, {{0x17, 0x4, 0x1, 0x2, 0x5c, 0x68, 0x0, 0xb3, 0x29, 0x0, @loopback, @multicast1, {[@timestamp_prespec={0x44, 0x44, 0x1d, 0x3, 0x3, [{@loopback, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbdac}, {@multicast2, 0x2}, {@remote, 0x101}, {@multicast2, 0x5}, {@remote, 0xad99}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x55df}, {@local, 0x4}]}, @ra={0x94, 0x4}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'ip_vti0\x00', r5, 0x10, 0x10, 0x400, 0x10000, {{0x21, 0x4, 0x1, 0x4, 0x84, 0x66, 0x0, 0x7, 0x2f, 0x0, @local, @local, {[@timestamp_prespec={0x44, 0x4c, 0x3d, 0x3, 0x3, [{@remote, 0x3}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@empty, 0x9f8a}, {@broadcast, 0x84}, {@private=0xa010102, 0x98c}, {@remote, 0x7fffffff}, {@rand_addr=0x64010101, 0x3}, {@broadcast, 0xfffffffb}]}, @timestamp={0x44, 0x14, 0x37, 0x0, 0x4, [0x9, 0xffffffff, 0x1f, 0x3]}, @end, @end, @timestamp_prespec={0x44, 0xc, 0x6e, 0x3, 0x7, [{@multicast2, 0x81}]}]}}}}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440))
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)={'team0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'ip6_vti0\x00', r7, 0x29, 0x5, 0x0, 0xfdb, 0x12, @local, @private0, 0x1, 0x8, 0x1, 0xd6}})
r8 = socket(0x3, 0x800, 0x2d6)
sendmsg$SMC_PNETID_ADD(r8, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040801)
r9 = syz_open_dev$vcsu(&(0x7f0000000880), 0x5, 0x202101)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r8, 0x89fa, &(0x7f0000000940)={'sit0\x00', &(0x7f00000008c0)={'syztnl2\x00', <r10=>r5, 0x4, 0x0, 0x7, 0x6, 0x2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x1, 0x2, 0x17d3}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'syztnl0\x00', r10, 0x2f, 0x3, 0x1, 0x0, 0x71, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x10, 0x7, 0x7}})

03:17:18 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

03:17:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

03:17:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

03:17:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:18 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001ac0)={'ip6_vti0\x00', 0x0, 0x4, 0x40, 0x80, 0x80000001, 0x3, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x20, 0x80000001, 0x80000000}})

03:17:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001ac0)={'ip6_vti0\x00', 0x0, 0x4, 0x40, 0x80, 0x80000001, 0x3, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x20, 0x80000001, 0x80000000}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001c80)={'ip_vti0\x00', &(0x7f0000001b80)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x8, 0x7fff, {{0x38, 0x4, 0x0, 0xd, 0xe0, 0x64, 0x0, 0x7f, 0x29, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x1f, 0x52, [@dev={0xac, 0x14, 0x14, 0xd}, @remote, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101]}, @lsrr={0x83, 0x1b, 0x94, [@remote, @broadcast, @loopback, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x26}]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x6, "8ccc98a6"}, @cipso={0x86, 0x2d, 0x3, [{0x5, 0x2}, {0x1, 0xc, "87b70972c346a0af1937"}, {0x0, 0x10, "9d9079112dacfb4109d2c98e9ffe"}, {0x0, 0x9, "e64e4ed0035b55"}]}, @timestamp_addr={0x44, 0xc, 0xbf, 0x1, 0x8, [{@local, 0x84}]}, @timestamp_addr={0x44, 0x34, 0x7f, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x4}, {@empty, 0x7}, {@broadcast, 0x9}, {@multicast2, 0x7f}, {@rand_addr=0x64010102, 0x2}, {@loopback, 0x6e09}]}, @lsrr={0x83, 0x7, 0x77, [@remote]}, @timestamp_addr={0x44, 0x14, 0x51, 0x1, 0x4, [{@empty, 0x81}, {@local, 0x8}]}]}}}}})

03:17:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001ac0)={'ip6_vti0\x00', 0x0, 0x4, 0x40, 0x80, 0x80000001, 0x3, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x20, 0x80000001, 0x80000000}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001c80)={'ip_vti0\x00', &(0x7f0000001b80)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x8, 0x7fff, {{0x38, 0x4, 0x0, 0xd, 0xe0, 0x64, 0x0, 0x7f, 0x29, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x1f, 0x52, [@dev={0xac, 0x14, 0x14, 0xd}, @remote, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101]}, @lsrr={0x83, 0x1b, 0x94, [@remote, @broadcast, @loopback, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x26}]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x6, "8ccc98a6"}, @cipso={0x86, 0x2d, 0x3, [{0x5, 0x2}, {0x1, 0xc, "87b70972c346a0af1937"}, {0x0, 0x10, "9d9079112dacfb4109d2c98e9ffe"}, {0x0, 0x9, "e64e4ed0035b55"}]}, @timestamp_addr={0x44, 0xc, 0xbf, 0x1, 0x8, [{@local, 0x84}]}, @timestamp_addr={0x44, 0x34, 0x7f, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x4}, {@empty, 0x7}, {@broadcast, 0x9}, {@multicast2, 0x7f}, {@rand_addr=0x64010102, 0x2}, {@loopback, 0x6e09}]}, @lsrr={0x83, 0x7, 0x77, [@remote]}, @timestamp_addr={0x44, 0x14, 0x51, 0x1, 0x4, [{@empty, 0x81}, {@local, 0x8}]}]}}}}})

03:17:18 executing program 4:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
restart_syscall()
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', <r1=>0x0, 0x29, 0x1, 0x64, 0x80000000, 0xf, @private1, @mcast2, 0x8000, 0x8000, 0xfffffffb, 0x40}})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@loopback, @private2, @mcast1, 0x7, 0xe, 0x8001, 0x500, 0x1f, 0x80010081, r1})
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x1, {0xfff, 0x5, 0x1, 0x9, 0x40, 0x0, 0x9, 0x5, 0x9}}, 0x43)
pipe2$9p(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80800)
write$P9_RMKDIR(r3, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x80, 0x4, 0x6}}, 0x14)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000480)={"5dee7bad8b86cb9d10c3699105fad6da", r4, 0x0, {0x5, 0x20}, {0x7, 0x3}, 0x3, [0xdfc4, 0x101, 0x0, 0x4, 0x8000000000000001, 0x100000000, 0x3ff, 0xc4a, 0x100000001, 0x101, 0x5, 0x5, 0xa1, 0x100000001, 0x9, 0xffffffffffffffff]})
r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0xfffff000, 0x10000})
write$P9_RLERRORu(r3, &(0x7f0000000600)={0x15, 0x7, 0x2, {{0x8, 'syztnl1\x00'}, 0x7}}, 0x15)
r6 = socket$packet(0x11, 0x2, 0x300)
recvfrom$packet(r6, &(0x7f0000000640)=""/98, 0x62, 0x40000121, &(0x7f00000006c0)={0x11, 0x6, 0x0, 0x1, 0x8, 0x6, @local}, 0x14)
write$P9_RMKDIR(r3, &(0x7f0000000700)={0x14, 0x49, 0x2, {0x84, 0x0, 0x1}}, 0x14)
syz_open_dev$vcsu(&(0x7f0000000740), 0x2a33e080, 0xa80)

03:17:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:18 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001ac0)={'ip6_vti0\x00', 0x0, 0x4, 0x40, 0x80, 0x80000001, 0x3, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x20, 0x80000001, 0x80000000}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001c80)={'ip_vti0\x00', &(0x7f0000001b80)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x8, 0x7fff, {{0x38, 0x4, 0x0, 0xd, 0xe0, 0x64, 0x0, 0x7f, 0x29, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x1f, 0x52, [@dev={0xac, 0x14, 0x14, 0xd}, @remote, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101]}, @lsrr={0x83, 0x1b, 0x94, [@remote, @broadcast, @loopback, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x26}]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x6, "8ccc98a6"}, @cipso={0x86, 0x2d, 0x3, [{0x5, 0x2}, {0x1, 0xc, "87b70972c346a0af1937"}, {0x0, 0x10, "9d9079112dacfb4109d2c98e9ffe"}, {0x0, 0x9, "e64e4ed0035b55"}]}, @timestamp_addr={0x44, 0xc, 0xbf, 0x1, 0x8, [{@local, 0x84}]}, @timestamp_addr={0x44, 0x34, 0x7f, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x4}, {@empty, 0x7}, {@broadcast, 0x9}, {@multicast2, 0x7f}, {@rand_addr=0x64010102, 0x2}, {@loopback, 0x6e09}]}, @lsrr={0x83, 0x7, 0x77, [@remote]}, @timestamp_addr={0x44, 0x14, 0x51, 0x1, 0x4, [{@empty, 0x81}, {@local, 0x8}]}]}}}}})

03:17:18 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
restart_syscall()
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', <r1=>0x0, 0x29, 0x1, 0x64, 0x80000000, 0xf, @private1, @mcast2, 0x8000, 0x8000, 0xfffffffb, 0x40}})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@loopback, @private2, @mcast1, 0x7, 0xe, 0x8001, 0x500, 0x1f, 0x80010081, r1})
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x1, {0xfff, 0x5, 0x1, 0x9, 0x40, 0x0, 0x9, 0x5, 0x9}}, 0x43)
pipe2$9p(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80800)
write$P9_RMKDIR(r3, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x80, 0x4, 0x6}}, 0x14)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000480)={"5dee7bad8b86cb9d10c3699105fad6da", r4, 0x0, {0x5, 0x20}, {0x7, 0x3}, 0x3, [0xdfc4, 0x101, 0x0, 0x4, 0x8000000000000001, 0x100000000, 0x3ff, 0xc4a, 0x100000001, 0x101, 0x5, 0x5, 0xa1, 0x100000001, 0x9, 0xffffffffffffffff]})
r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0xfffff000, 0x10000})
write$P9_RLERRORu(r3, &(0x7f0000000600)={0x15, 0x7, 0x2, {{0x8, 'syztnl1\x00'}, 0x7}}, 0x15)
r6 = socket$packet(0x11, 0x2, 0x300)
recvfrom$packet(r6, &(0x7f0000000640)=""/98, 0x62, 0x40000121, &(0x7f00000006c0)={0x11, 0x6, 0x0, 0x1, 0x8, 0x6, @local}, 0x14)
write$P9_RMKDIR(r3, &(0x7f0000000700)={0x14, 0x49, 0x2, {0x84, 0x0, 0x1}}, 0x14)
r7 = syz_open_dev$vcsu(&(0x7f0000000740), 0x2a33e080, 0xa80)
write$P9_RATTACH(r7, &(0x7f0000000780)={0x14, 0x69, 0x1, {0x2, 0x2, 0x3}}, 0x14)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r7, 0xc01064c2, &(0x7f00000007c0)={0x0, 0x0, r7})

03:17:18 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001ac0)={'ip6_vti0\x00', <r7=>0x0, 0x4, 0x40, 0x80, 0x80000001, 0x3, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x20, 0x80000001, 0x80000000}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001c80)={'ip_vti0\x00', &(0x7f0000001b80)={'syztnl0\x00', <r8=>0x0, 0x7, 0x7800, 0x8, 0x7fff, {{0x38, 0x4, 0x0, 0xd, 0xe0, 0x64, 0x0, 0x7f, 0x29, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x1f, 0x52, [@dev={0xac, 0x14, 0x14, 0xd}, @remote, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101]}, @lsrr={0x83, 0x1b, 0x94, [@remote, @broadcast, @loopback, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x26}]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x6, "8ccc98a6"}, @cipso={0x86, 0x2d, 0x3, [{0x5, 0x2}, {0x1, 0xc, "87b70972c346a0af1937"}, {0x0, 0x10, "9d9079112dacfb4109d2c98e9ffe"}, {0x0, 0x9, "e64e4ed0035b55"}]}, @timestamp_addr={0x44, 0xc, 0xbf, 0x1, 0x8, [{@local, 0x84}]}, @timestamp_addr={0x44, 0x34, 0x7f, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x4}, {@empty, 0x7}, {@broadcast, 0x9}, {@multicast2, 0x7f}, {@rand_addr=0x64010102, 0x2}, {@loopback, 0x6e09}]}, @lsrr={0x83, 0x7, 0x77, [@remote]}, @timestamp_addr={0x44, 0x14, 0x51, 0x1, 0x4, [{@empty, 0x81}, {@local, 0x8}]}]}}}}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000001f40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e00)={0xc4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xc4}}, 0x40448c0)

03:17:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:18 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
restart_syscall()
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', <r1=>0x0, 0x29, 0x1, 0x64, 0x80000000, 0xf, @private1, @mcast2, 0x8000, 0x8000, 0xfffffffb, 0x40}})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@loopback, @private2, @mcast1, 0x7, 0xe, 0x8001, 0x500, 0x1f, 0x80010081, r1})
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x1, {0xfff, 0x5, 0x1, 0x9, 0x40, 0x0, 0x9, 0x5, 0x9}}, 0x43)
pipe2$9p(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80800)
write$P9_RMKDIR(r3, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x80, 0x4, 0x6}}, 0x14)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000480)={"5dee7bad8b86cb9d10c3699105fad6da", r4, 0x0, {0x5, 0x20}, {0x7, 0x3}, 0x3, [0xdfc4, 0x101, 0x0, 0x4, 0x8000000000000001, 0x100000000, 0x3ff, 0xc4a, 0x100000001, 0x101, 0x5, 0x5, 0xa1, 0x100000001, 0x9, 0xffffffffffffffff]})
r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0xfffff000, 0x10000})
write$P9_RLERRORu(r3, &(0x7f0000000600)={0x15, 0x7, 0x2, {{0x8, 'syztnl1\x00'}, 0x7}}, 0x15)
r6 = socket$packet(0x11, 0x2, 0x300)
recvfrom$packet(r6, &(0x7f0000000640)=""/98, 0x62, 0x40000121, &(0x7f00000006c0)={0x11, 0x6, 0x0, 0x1, 0x8, 0x6, @local}, 0x14)
write$P9_RMKDIR(r3, &(0x7f0000000700)={0x14, 0x49, 0x2, {0x84, 0x0, 0x1}}, 0x14)
r7 = syz_open_dev$vcsu(&(0x7f0000000740), 0x2a33e080, 0xa80)
write$P9_RATTACH(r7, &(0x7f0000000780)={0x14, 0x69, 0x1, {0x2, 0x2, 0x3}}, 0x14)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r7, 0xc01064c2, &(0x7f00000007c0)={0x0, 0x0, r7})

03:17:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001ac0)={'ip6_vti0\x00', <r7=>0x0, 0x4, 0x40, 0x80, 0x80000001, 0x3, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x20, 0x80000001, 0x80000000}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001c80)={'ip_vti0\x00', &(0x7f0000001b80)={'syztnl0\x00', <r8=>0x0, 0x7, 0x7800, 0x8, 0x7fff, {{0x38, 0x4, 0x0, 0xd, 0xe0, 0x64, 0x0, 0x7f, 0x29, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x1f, 0x52, [@dev={0xac, 0x14, 0x14, 0xd}, @remote, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101]}, @lsrr={0x83, 0x1b, 0x94, [@remote, @broadcast, @loopback, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x26}]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x6, "8ccc98a6"}, @cipso={0x86, 0x2d, 0x3, [{0x5, 0x2}, {0x1, 0xc, "87b70972c346a0af1937"}, {0x0, 0x10, "9d9079112dacfb4109d2c98e9ffe"}, {0x0, 0x9, "e64e4ed0035b55"}]}, @timestamp_addr={0x44, 0xc, 0xbf, 0x1, 0x8, [{@local, 0x84}]}, @timestamp_addr={0x44, 0x34, 0x7f, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x4}, {@empty, 0x7}, {@broadcast, 0x9}, {@multicast2, 0x7f}, {@rand_addr=0x64010102, 0x2}, {@loopback, 0x6e09}]}, @lsrr={0x83, 0x7, 0x77, [@remote]}, @timestamp_addr={0x44, 0x14, 0x51, 0x1, 0x4, [{@empty, 0x81}, {@local, 0x8}]}]}}}}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000001f40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e00)={0xc4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xc4}}, 0x40448c0)

03:17:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001ac0)={'ip6_vti0\x00', <r7=>0x0, 0x4, 0x40, 0x80, 0x80000001, 0x3, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x20, 0x80000001, 0x80000000}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001c80)={'ip_vti0\x00', &(0x7f0000001b80)={'syztnl0\x00', <r8=>0x0, 0x7, 0x7800, 0x8, 0x7fff, {{0x38, 0x4, 0x0, 0xd, 0xe0, 0x64, 0x0, 0x7f, 0x29, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x1f, 0x52, [@dev={0xac, 0x14, 0x14, 0xd}, @remote, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101]}, @lsrr={0x83, 0x1b, 0x94, [@remote, @broadcast, @loopback, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x26}]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x6, "8ccc98a6"}, @cipso={0x86, 0x2d, 0x3, [{0x5, 0x2}, {0x1, 0xc, "87b70972c346a0af1937"}, {0x0, 0x10, "9d9079112dacfb4109d2c98e9ffe"}, {0x0, 0x9, "e64e4ed0035b55"}]}, @timestamp_addr={0x44, 0xc, 0xbf, 0x1, 0x8, [{@local, 0x84}]}, @timestamp_addr={0x44, 0x34, 0x7f, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x4}, {@empty, 0x7}, {@broadcast, 0x9}, {@multicast2, 0x7f}, {@rand_addr=0x64010102, 0x2}, {@loopback, 0x6e09}]}, @lsrr={0x83, 0x7, 0x77, [@remote]}, @timestamp_addr={0x44, 0x14, 0x51, 0x1, 0x4, [{@empty, 0x81}, {@local, 0x8}]}]}}}}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000001f40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e00)={0xc4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xc4}}, 0x40448c0)

03:17:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:19 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001ac0)={'ip6_vti0\x00', <r7=>0x0, 0x4, 0x40, 0x80, 0x80000001, 0x3, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x20, 0x80000001, 0x80000000}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001c80)={'ip_vti0\x00', &(0x7f0000001b80)={'syztnl0\x00', <r8=>0x0, 0x7, 0x7800, 0x8, 0x7fff, {{0x38, 0x4, 0x0, 0xd, 0xe0, 0x64, 0x0, 0x7f, 0x29, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x1f, 0x52, [@dev={0xac, 0x14, 0x14, 0xd}, @remote, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101]}, @lsrr={0x83, 0x1b, 0x94, [@remote, @broadcast, @loopback, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x26}]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x6, "8ccc98a6"}, @cipso={0x86, 0x2d, 0x3, [{0x5, 0x2}, {0x1, 0xc, "87b70972c346a0af1937"}, {0x0, 0x10, "9d9079112dacfb4109d2c98e9ffe"}, {0x0, 0x9, "e64e4ed0035b55"}]}, @timestamp_addr={0x44, 0xc, 0xbf, 0x1, 0x8, [{@local, 0x84}]}, @timestamp_addr={0x44, 0x34, 0x7f, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x4}, {@empty, 0x7}, {@broadcast, 0x9}, {@multicast2, 0x7f}, {@rand_addr=0x64010102, 0x2}, {@loopback, 0x6e09}]}, @lsrr={0x83, 0x7, 0x77, [@remote]}, @timestamp_addr={0x44, 0x14, 0x51, 0x1, 0x4, [{@empty, 0x81}, {@local, 0x8}]}]}}}}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000001f40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e00)={0xc4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xc4}}, 0x40448c0)

03:17:19 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
restart_syscall()
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', <r1=>0x0, 0x29, 0x1, 0x64, 0x80000000, 0xf, @private1, @mcast2, 0x8000, 0x8000, 0xfffffffb, 0x40}})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@loopback, @private2, @mcast1, 0x7, 0xe, 0x8001, 0x500, 0x1f, 0x80010081, r1})
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x1, {0xfff, 0x5, 0x1, 0x9, 0x40, 0x0, 0x9, 0x5, 0x9}}, 0x43)
pipe2$9p(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80800)
write$P9_RMKDIR(r3, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x80, 0x4, 0x6}}, 0x14)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000480)={"5dee7bad8b86cb9d10c3699105fad6da", r4, 0x0, {0x5, 0x20}, {0x7, 0x3}, 0x3, [0xdfc4, 0x101, 0x0, 0x4, 0x8000000000000001, 0x100000000, 0x3ff, 0xc4a, 0x100000001, 0x101, 0x5, 0x5, 0xa1, 0x100000001, 0x9, 0xffffffffffffffff]})
r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0xfffff000, 0x10000})
write$P9_RLERRORu(r3, &(0x7f0000000600)={0x15, 0x7, 0x2, {{0x8, 'syztnl1\x00'}, 0x7}}, 0x15)
r6 = socket$packet(0x11, 0x2, 0x300)
recvfrom$packet(r6, &(0x7f0000000640)=""/98, 0x62, 0x40000121, &(0x7f00000006c0)={0x11, 0x6, 0x0, 0x1, 0x8, 0x6, @local}, 0x14)
write$P9_RMKDIR(r3, &(0x7f0000000700)={0x14, 0x49, 0x2, {0x84, 0x0, 0x1}}, 0x14)
r7 = syz_open_dev$vcsu(&(0x7f0000000740), 0x2a33e080, 0xa80)
write$P9_RATTACH(r7, &(0x7f0000000780)={0x14, 0x69, 0x1, {0x2, 0x2, 0x3}}, 0x14)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r7, 0xc01064c2, &(0x7f00000007c0)={0x0, 0x0, r7})

03:17:19 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001ac0)={'ip6_vti0\x00', <r7=>0x0, 0x4, 0x40, 0x80, 0x80000001, 0x3, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x20, 0x80000001, 0x80000000}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001c80)={'ip_vti0\x00', &(0x7f0000001b80)={'syztnl0\x00', <r8=>0x0, 0x7, 0x7800, 0x8, 0x7fff, {{0x38, 0x4, 0x0, 0xd, 0xe0, 0x64, 0x0, 0x7f, 0x29, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x1f, 0x52, [@dev={0xac, 0x14, 0x14, 0xd}, @remote, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101]}, @lsrr={0x83, 0x1b, 0x94, [@remote, @broadcast, @loopback, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x26}]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x6, "8ccc98a6"}, @cipso={0x86, 0x2d, 0x3, [{0x5, 0x2}, {0x1, 0xc, "87b70972c346a0af1937"}, {0x0, 0x10, "9d9079112dacfb4109d2c98e9ffe"}, {0x0, 0x9, "e64e4ed0035b55"}]}, @timestamp_addr={0x44, 0xc, 0xbf, 0x1, 0x8, [{@local, 0x84}]}, @timestamp_addr={0x44, 0x34, 0x7f, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x4}, {@empty, 0x7}, {@broadcast, 0x9}, {@multicast2, 0x7f}, {@rand_addr=0x64010102, 0x2}, {@loopback, 0x6e09}]}, @lsrr={0x83, 0x7, 0x77, [@remote]}, @timestamp_addr={0x44, 0x14, 0x51, 0x1, 0x4, [{@empty, 0x81}, {@local, 0x8}]}]}}}}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000001f40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e00)={0xc4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xc4}}, 0x40448c0)

03:17:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001ac0)={'ip6_vti0\x00', <r7=>0x0, 0x4, 0x40, 0x80, 0x80000001, 0x3, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x20, 0x80000001, 0x80000000}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001c80)={'ip_vti0\x00', &(0x7f0000001b80)={'syztnl0\x00', <r8=>0x0, 0x7, 0x7800, 0x8, 0x7fff, {{0x38, 0x4, 0x0, 0xd, 0xe0, 0x64, 0x0, 0x7f, 0x29, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x1f, 0x52, [@dev={0xac, 0x14, 0x14, 0xd}, @remote, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101]}, @lsrr={0x83, 0x1b, 0x94, [@remote, @broadcast, @loopback, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x26}]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x6, "8ccc98a6"}, @cipso={0x86, 0x2d, 0x3, [{0x5, 0x2}, {0x1, 0xc, "87b70972c346a0af1937"}, {0x0, 0x10, "9d9079112dacfb4109d2c98e9ffe"}, {0x0, 0x9, "e64e4ed0035b55"}]}, @timestamp_addr={0x44, 0xc, 0xbf, 0x1, 0x8, [{@local, 0x84}]}, @timestamp_addr={0x44, 0x34, 0x7f, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x4}, {@empty, 0x7}, {@broadcast, 0x9}, {@multicast2, 0x7f}, {@rand_addr=0x64010102, 0x2}, {@loopback, 0x6e09}]}, @lsrr={0x83, 0x7, 0x77, [@remote]}, @timestamp_addr={0x44, 0x14, 0x51, 0x1, 0x4, [{@empty, 0x81}, {@local, 0x8}]}]}}}}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000001f40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e00)={0xc4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xc4}}, 0x40448c0)

03:17:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001ac0)={'ip6_vti0\x00', <r7=>0x0, 0x4, 0x40, 0x80, 0x80000001, 0x3, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x20, 0x80000001, 0x80000000}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001c80)={'ip_vti0\x00', &(0x7f0000001b80)={'syztnl0\x00', <r8=>0x0, 0x7, 0x7800, 0x8, 0x7fff, {{0x38, 0x4, 0x0, 0xd, 0xe0, 0x64, 0x0, 0x7f, 0x29, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x1f, 0x52, [@dev={0xac, 0x14, 0x14, 0xd}, @remote, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101]}, @lsrr={0x83, 0x1b, 0x94, [@remote, @broadcast, @loopback, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x26}]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x6, "8ccc98a6"}, @cipso={0x86, 0x2d, 0x3, [{0x5, 0x2}, {0x1, 0xc, "87b70972c346a0af1937"}, {0x0, 0x10, "9d9079112dacfb4109d2c98e9ffe"}, {0x0, 0x9, "e64e4ed0035b55"}]}, @timestamp_addr={0x44, 0xc, 0xbf, 0x1, 0x8, [{@local, 0x84}]}, @timestamp_addr={0x44, 0x34, 0x7f, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x4}, {@empty, 0x7}, {@broadcast, 0x9}, {@multicast2, 0x7f}, {@rand_addr=0x64010102, 0x2}, {@loopback, 0x6e09}]}, @lsrr={0x83, 0x7, 0x77, [@remote]}, @timestamp_addr={0x44, 0x14, 0x51, 0x1, 0x4, [{@empty, 0x81}, {@local, 0x8}]}]}}}}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000001f40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e00)={0xc4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xc4}}, 0x40448c0)

03:17:19 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001ac0)={'ip6_vti0\x00', <r7=>0x0, 0x4, 0x40, 0x80, 0x80000001, 0x3, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x20, 0x80000001, 0x80000000}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001c80)={'ip_vti0\x00', &(0x7f0000001b80)={'syztnl0\x00', <r8=>0x0, 0x7, 0x7800, 0x8, 0x7fff, {{0x38, 0x4, 0x0, 0xd, 0xe0, 0x64, 0x0, 0x7f, 0x29, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x1f, 0x52, [@dev={0xac, 0x14, 0x14, 0xd}, @remote, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101]}, @lsrr={0x83, 0x1b, 0x94, [@remote, @broadcast, @loopback, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x26}]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x6, "8ccc98a6"}, @cipso={0x86, 0x2d, 0x3, [{0x5, 0x2}, {0x1, 0xc, "87b70972c346a0af1937"}, {0x0, 0x10, "9d9079112dacfb4109d2c98e9ffe"}, {0x0, 0x9, "e64e4ed0035b55"}]}, @timestamp_addr={0x44, 0xc, 0xbf, 0x1, 0x8, [{@local, 0x84}]}, @timestamp_addr={0x44, 0x34, 0x7f, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x4}, {@empty, 0x7}, {@broadcast, 0x9}, {@multicast2, 0x7f}, {@rand_addr=0x64010102, 0x2}, {@loopback, 0x6e09}]}, @lsrr={0x83, 0x7, 0x77, [@remote]}, @timestamp_addr={0x44, 0x14, 0x51, 0x1, 0x4, [{@empty, 0x81}, {@local, 0x8}]}]}}}}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000001f40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e00)={0xc4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xc4}}, 0x40448c0)

03:17:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001ac0)={'ip6_vti0\x00', <r7=>0x0, 0x4, 0x40, 0x80, 0x80000001, 0x3, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x20, 0x80000001, 0x80000000}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001c80)={'ip_vti0\x00', &(0x7f0000001b80)={'syztnl0\x00', <r8=>0x0, 0x7, 0x7800, 0x8, 0x7fff, {{0x38, 0x4, 0x0, 0xd, 0xe0, 0x64, 0x0, 0x7f, 0x29, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x1f, 0x52, [@dev={0xac, 0x14, 0x14, 0xd}, @remote, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101]}, @lsrr={0x83, 0x1b, 0x94, [@remote, @broadcast, @loopback, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x26}]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x6, "8ccc98a6"}, @cipso={0x86, 0x2d, 0x3, [{0x5, 0x2}, {0x1, 0xc, "87b70972c346a0af1937"}, {0x0, 0x10, "9d9079112dacfb4109d2c98e9ffe"}, {0x0, 0x9, "e64e4ed0035b55"}]}, @timestamp_addr={0x44, 0xc, 0xbf, 0x1, 0x8, [{@local, 0x84}]}, @timestamp_addr={0x44, 0x34, 0x7f, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x4}, {@empty, 0x7}, {@broadcast, 0x9}, {@multicast2, 0x7f}, {@rand_addr=0x64010102, 0x2}, {@loopback, 0x6e09}]}, @lsrr={0x83, 0x7, 0x77, [@remote]}, @timestamp_addr={0x44, 0x14, 0x51, 0x1, 0x4, [{@empty, 0x81}, {@local, 0x8}]}]}}}}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000001f40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e00)={0xc4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xc4}}, 0x40448c0)

03:17:19 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001ac0)={'ip6_vti0\x00', <r7=>0x0, 0x4, 0x40, 0x80, 0x80000001, 0x3, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x20, 0x80000001, 0x80000000}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001c80)={'ip_vti0\x00', &(0x7f0000001b80)={'syztnl0\x00', <r8=>0x0, 0x7, 0x7800, 0x8, 0x7fff, {{0x38, 0x4, 0x0, 0xd, 0xe0, 0x64, 0x0, 0x7f, 0x29, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x1f, 0x52, [@dev={0xac, 0x14, 0x14, 0xd}, @remote, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101]}, @lsrr={0x83, 0x1b, 0x94, [@remote, @broadcast, @loopback, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x26}]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x6, "8ccc98a6"}, @cipso={0x86, 0x2d, 0x3, [{0x5, 0x2}, {0x1, 0xc, "87b70972c346a0af1937"}, {0x0, 0x10, "9d9079112dacfb4109d2c98e9ffe"}, {0x0, 0x9, "e64e4ed0035b55"}]}, @timestamp_addr={0x44, 0xc, 0xbf, 0x1, 0x8, [{@local, 0x84}]}, @timestamp_addr={0x44, 0x34, 0x7f, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x4}, {@empty, 0x7}, {@broadcast, 0x9}, {@multicast2, 0x7f}, {@rand_addr=0x64010102, 0x2}, {@loopback, 0x6e09}]}, @lsrr={0x83, 0x7, 0x77, [@remote]}, @timestamp_addr={0x44, 0x14, 0x51, 0x1, 0x4, [{@empty, 0x81}, {@local, 0x8}]}]}}}}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000001f40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e00)={0xc4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xc4}}, 0x40448c0)

03:17:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:19 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 1)

03:17:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 1)

03:17:19 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001ac0)={'ip6_vti0\x00', 0x0, 0x4, 0x40, 0x80, 0x80000001, 0x3, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x20, 0x80000001, 0x80000000}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001c80)={'ip_vti0\x00', &(0x7f0000001b80)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x8, 0x7fff, {{0x38, 0x4, 0x0, 0xd, 0xe0, 0x64, 0x0, 0x7f, 0x29, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x1f, 0x52, [@dev={0xac, 0x14, 0x14, 0xd}, @remote, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101]}, @lsrr={0x83, 0x1b, 0x94, [@remote, @broadcast, @loopback, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x26}]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x6, "8ccc98a6"}, @cipso={0x86, 0x2d, 0x3, [{0x5, 0x2}, {0x1, 0xc, "87b70972c346a0af1937"}, {0x0, 0x10, "9d9079112dacfb4109d2c98e9ffe"}, {0x0, 0x9, "e64e4ed0035b55"}]}, @timestamp_addr={0x44, 0xc, 0xbf, 0x1, 0x8, [{@local, 0x84}]}, @timestamp_addr={0x44, 0x34, 0x7f, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x4}, {@empty, 0x7}, {@broadcast, 0x9}, {@multicast2, 0x7f}, {@rand_addr=0x64010102, 0x2}, {@loopback, 0x6e09}]}, @lsrr={0x83, 0x7, 0x77, [@remote]}, @timestamp_addr={0x44, 0x14, 0x51, 0x1, 0x4, [{@empty, 0x81}, {@local, 0x8}]}]}}}}})

03:17:19 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 2)

[  270.460007][T18079] FAULT_INJECTION: forcing a failure.
[  270.460007][T18079] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  270.460041][T18079] CPU: 1 PID: 18079 Comm: syz-executor.1 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
03:17:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001ac0)={'ip6_vti0\x00', 0x0, 0x4, 0x40, 0x80, 0x80000001, 0x3, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x20, 0x80000001, 0x80000000}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001c80)={'ip_vti0\x00', &(0x7f0000001b80)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x8, 0x7fff, {{0x38, 0x4, 0x0, 0xd, 0xe0, 0x64, 0x0, 0x7f, 0x29, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x1f, 0x52, [@dev={0xac, 0x14, 0x14, 0xd}, @remote, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101]}, @lsrr={0x83, 0x1b, 0x94, [@remote, @broadcast, @loopback, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x26}]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x6, "8ccc98a6"}, @cipso={0x86, 0x2d, 0x3, [{0x5, 0x2}, {0x1, 0xc, "87b70972c346a0af1937"}, {0x0, 0x10, "9d9079112dacfb4109d2c98e9ffe"}, {0x0, 0x9, "e64e4ed0035b55"}]}, @timestamp_addr={0x44, 0xc, 0xbf, 0x1, 0x8, [{@local, 0x84}]}, @timestamp_addr={0x44, 0x34, 0x7f, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x4}, {@empty, 0x7}, {@broadcast, 0x9}, {@multicast2, 0x7f}, {@rand_addr=0x64010102, 0x2}, {@loopback, 0x6e09}]}, @lsrr={0x83, 0x7, 0x77, [@remote]}, @timestamp_addr={0x44, 0x14, 0x51, 0x1, 0x4, [{@empty, 0x81}, {@local, 0x8}]}]}}}}})

03:17:19 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

[  270.460071][T18079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
03:17:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 2)

03:17:19 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001ac0)={'ip6_vti0\x00', 0x0, 0x4, 0x40, 0x80, 0x80000001, 0x3, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x20, 0x80000001, 0x80000000}})

[  270.460085][T18079] Call Trace:
[  270.460091][T18079]  <TASK>
[  270.460099][T18079]  dump_stack_lvl+0xcd/0x134
03:17:19 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

[  270.460302][T18079]  should_fail.cold+0x5/0xa
03:17:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

[  270.460332][T18079]  _copy_from_user+0x2a/0x170
[  270.460450][T18079]  io_uring_setup+0x86/0x150
03:17:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 3)

03:17:19 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001ac0)={'ip6_vti0\x00', 0x0, 0x4, 0x40, 0x80, 0x80000001, 0x3, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x20, 0x80000001, 0x80000000}})

03:17:19 executing program 1:
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0xa2, 0x2, 0xfffffffa, 0x40, @local, @mcast2, 0x20, 0x7800, 0x7f, 0xffffffea}})
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

[  270.460553][T18079]  ? __context_tracking_exit+0xb8/0xe0
[  270.460612][T18079]  ? lock_downgrade+0x6e0/0x6e0
03:17:19 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

[  270.460678][T18079]  ? io_sqe_buffers_register+0x1b0/0x1b0
[  270.460724][T18079]  ? lock_downgrade+0x6e0/0x6e0
[  270.460774][T18079]  ? syscall_enter_from_user_mode+0x21/0x70
[  270.460848][T18079]  do_syscall_64+0x35/0xb0
03:17:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 4)

03:17:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:19 executing program 1:
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0xa2, 0x2, 0xfffffffa, 0x40, @local, @mcast2, 0x20, 0x7800, 0x7f, 0xffffffea}}) (async)
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

[  270.460877][T18079]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
[  270.460922][T18079] RIP: 0033:0x7f2597c890e9
03:17:20 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001ac0)={'ip6_vti0\x00', 0x0, 0x4, 0x40, 0x80, 0x80000001, 0x3, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x20, 0x80000001, 0x80000000}})

03:17:20 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 5)

[  270.460942][T18079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
03:17:20 executing program 1:
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0xa2, 0x2, 0xfffffffa, 0x40, @local, @mcast2, 0x20, 0x7800, 0x7f, 0xffffffea}}) (async)
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

[  270.460964][T18079] RSP: 002b:00007f2598e3f0e8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
03:17:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:20 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

03:17:20 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))

[  270.460988][T18079] RAX: ffffffffffffffda RBX: 00007f2597d9bf60 RCX: 00007f2597c890e9
[  270.461003][T18079] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 0000000000000000
03:17:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 6)

03:17:20 executing program 1:
r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x24)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x8, 0x0, 0x8, 0x6, 0xa6b2, 0x20, 0x8, 0x0, 0xbf, 0x3, 0x9, 0x7}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
syz_io_uring_setup(0xfffffffd, &(0x7f0000000400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000004c0))

[  270.461017][T18079] RBP: 0000000020000400 R08: 00000000200004c0 R09: 00000000200004c0
[  270.461032][T18079] R10: 0000000020000480 R11: 0000000000000206 R12: 00000000200004c0
03:17:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

[  270.461047][T18079] R13: 0000000020ffc000 R14: 0000000020000480 R15: 0000000020ffb000
03:17:20 executing program 1:
r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x24)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x8, 0x0, 0x8, 0x6, 0xa6b2, 0x20, 0x8, 0x0, 0xbf, 0x3, 0x9, 0x7}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
syz_io_uring_setup(0xfffffffd, &(0x7f0000000400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000004c0))
openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x24) (async)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x8, 0x0, 0x8, 0x6, 0xa6b2, 0x20, 0x8, 0x0, 0xbf, 0x3, 0x9, 0x7}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
syz_io_uring_setup(0xfffffffd, &(0x7f0000000400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000004c0)) (async)

03:17:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
r5 = syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000001a40))

03:17:20 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)

03:17:20 executing program 0:
r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x24)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x8, 0x0, 0x8, 0x6, 0xa6b2, 0x20, 0x8, 0x0, 0xbf, 0x3, 0x9, 0x7}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
syz_io_uring_setup(0xfffffffd, &(0x7f0000000400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000004c0))

[  270.461076][T18079]  </TASK>
[  270.582246][T18083] FAULT_INJECTION: forcing a failure.
[  270.582246][T18083] name fail_usercopy, interval 1, probability 0, space 0, times 0
03:17:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 7)

[  270.582278][T18083] CPU: 1 PID: 18083 Comm: syz-executor.3 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
03:17:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:20 executing program 0:
r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x24)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x8, 0x0, 0x8, 0x6, 0xa6b2, 0x20, 0x8, 0x0, 0xbf, 0x3, 0x9, 0x7}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
syz_io_uring_setup(0xfffffffd, &(0x7f0000000400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000004c0))

[  270.582304][T18083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
03:17:20 executing program 1:
r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x24)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x8, 0x0, 0x8, 0x6, 0xa6b2, 0x20, 0x8, 0x0, 0xbf, 0x3, 0x9, 0x7}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
syz_io_uring_setup(0xfffffffd, &(0x7f0000000400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000004c0))
openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x24) (async)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x8, 0x0, 0x8, 0x6, 0xa6b2, 0x20, 0x8, 0x0, 0xbf, 0x3, 0x9, 0x7}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
syz_io_uring_setup(0xfffffffd, &(0x7f0000000400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000004c0)) (async)

[  270.582317][T18083] Call Trace:
[  270.582322][T18083]  <TASK>
[  270.582330][T18083]  dump_stack_lvl+0xcd/0x134
03:17:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)

03:17:20 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)

03:17:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 8)

[  270.582365][T18083]  should_fail.cold+0x5/0xa
[  270.582394][T18083]  _copy_from_user+0x2a/0x170
[  270.582437][T18083]  io_uring_setup+0x86/0x150
03:17:20 executing program 0:
r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x24)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x8, 0x0, 0x8, 0x6, 0xa6b2, 0x20, 0x8, 0x0, 0xbf, 0x3, 0x9, 0x7}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
syz_io_uring_setup(0xfffffffd, &(0x7f0000000400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000004c0))

[  270.582472][T18083]  ? __context_tracking_exit+0xb8/0xe0
[  270.582496][T18083]  ? lock_downgrade+0x6e0/0x6e0
03:17:20 executing program 1:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280))
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
write$P9_RLERRORu(r1, &(0x7f0000000600)={0x15, 0x7, 0x2, {{0x8, 'syztnl1\x00'}}}, 0x15)
socket$packet(0x11, 0x2, 0x300)
write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x49, 0x2, {0x0, 0x0, 0x1}}, 0x14)
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:20 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)

03:17:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 9)

[  270.582536][T18083]  ? io_sqe_buffers_register+0x1b0/0x1b0
[  270.582573][T18083]  ? lock_downgrade+0x6e0/0x6e0
[  270.582624][T18083]  ? syscall_enter_from_user_mode+0x21/0x70
03:17:20 executing program 0:
openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x24)
syz_io_uring_setup(0xfffffffd, &(0x7f0000000400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000004c0))

03:17:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r2, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x3ac, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x4e20, 0x4, 0x4e20, 0x0, 0xa, 0xa0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}, @tfcpad={0x8}, @extra_flags={0x8, 0x18, 0x8}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)

[  270.582671][T18083]  do_syscall_64+0x35/0xb0
[  270.582712][T18083]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
[  270.582739][T18083] RIP: 0033:0x7f45056890e9
03:17:20 executing program 1:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) (async, rerun: 64)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0) (rerun: 64)
write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)) (async)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2) (async)
write$P9_RLERRORu(r1, &(0x7f0000000600)={0x15, 0x7, 0x2, {{0x8, 'syztnl1\x00'}}}, 0x15) (async)
socket$packet(0x11, 0x2, 0x300) (async)
write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x49, 0x2, {0x0, 0x0, 0x1}}, 0x14) (async, rerun: 64)
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (rerun: 64)

[  270.582757][T18083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
03:17:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x0, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 10)

03:17:20 executing program 0:
syz_io_uring_setup(0xfffffffd, &(0x7f0000000400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000004c0))

03:17:20 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)

03:17:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})

[  270.582779][T18083] RSP: 002b:00007f45068320e8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  270.582802][T18083] RAX: ffffffffffffffda RBX: 00007f450579bf60 RCX: 00007f45056890e9
03:17:21 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000004c0))

03:17:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 11)

[  270.582817][T18083] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 0000000000002b2a
[  270.582832][T18083] RBP: 0000000020000400 R08: 00000000200004c0 R09: 00000000200004c0
03:17:21 executing program 1:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) (async)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)) (async)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2) (async)
write$P9_RLERRORu(r1, &(0x7f0000000600)={0x15, 0x7, 0x2, {{0x8, 'syztnl1\x00'}}}, 0x15) (async)
socket$packet(0x11, 0x2, 0x300) (async)
write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x49, 0x2, {0x0, 0x0, 0x1}}, 0x14) (async)
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x0, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)

03:17:21 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000004c0))

[  270.582846][T18083] R10: 0000000020000480 R11: 0000000000000206 R12: 00000000200004c0
[  270.582860][T18083] R13: 0000000020ffc000 R14: 0000000020000480 R15: 0000000020ffb000
03:17:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r4=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2, 0x2, 0x1, {0x0, 0x0, r2}}, 0x7c32)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)

03:17:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 12)

[  270.582893][T18083]  </TASK>
[  270.641840][T18086] FAULT_INJECTION: forcing a failure.
[  270.641840][T18086] name fail_usercopy, interval 1, probability 0, space 0, times 0
03:17:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x0, 0x3, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:21 executing program 1:
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x283795156d348654, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040000}, 0x8040010)

03:17:21 executing program 0:
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000004c0))

[  270.641873][T18086] CPU: 1 PID: 18086 Comm: syz-executor.1 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
03:17:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)

03:17:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)

[  270.641900][T18086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
03:17:21 executing program 1:
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x283795156d348654, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040000}, 0x8040010)

03:17:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 13)

03:17:21 executing program 0:
syz_io_uring_setup(0xfffffffd, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000004c0))

[  270.641914][T18086] Call Trace:
[  270.641919][T18086]  <TASK>
[  270.641928][T18086]  dump_stack_lvl+0xcd/0x134
[  270.641967][T18086]  should_fail.cold+0x5/0xa
03:17:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)

03:17:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x0, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)

[  270.641999][T18086]  _copy_to_user+0x2a/0x140
[  270.642042][T18086]  simple_read_from_buffer+0xcc/0x160
[  270.642174][T18086]  proc_fail_nth_read+0x187/0x220
03:17:21 executing program 1:
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x283795156d348654, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040000}, 0x8040010)

03:17:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 14)

[  270.642227][T18086]  ? proc_exe_link+0x1d0/0x1d0
[  270.642266][T18086]  ? security_file_permission+0xab/0xd0
03:17:21 executing program 0:
syz_io_uring_setup(0xfffffffd, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000004c0))

03:17:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)

[  270.642377][T18086]  ? proc_exe_link+0x1d0/0x1d0
03:17:21 executing program 0:
syz_io_uring_setup(0xfffffffd, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000004c0))

[  270.642417][T18086]  vfs_read+0x1ef/0x5d0
[  270.642491][T18086]  ksys_read+0x127/0x250
[  270.642529][T18086]  ? vfs_write+0xac0/0xac0
03:17:21 executing program 1:
shmctl$IPC_RMID(0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil)

03:17:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r2 = socket(0xb, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)

03:17:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x0, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

[  270.642569][T18086]  ? syscall_enter_from_user_mode+0x21/0x70
[  270.642619][T18086]  do_syscall_64+0x35/0xb0
[  270.642651][T18086]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
03:17:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 15)

03:17:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)

[  270.642688][T18086] RIP: 0033:0x7f2597c3bc9c
03:17:21 executing program 0:
syz_io_uring_setup(0xfffffffd, &(0x7f0000000400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000004c0))

03:17:21 executing program 1:
shmctl$IPC_RMID(0x0, 0x0) (async)
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (async)
shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil)

[  270.642708][T18086] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
03:17:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x0, 0x4, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)

[  270.642733][T18086] RSP: 002b:00007f2598e3f160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  270.642757][T18086] RAX: ffffffffffffffda RBX: 00007f2597d9bf60 RCX: 00007f2597c3bc9c
03:17:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)

03:17:21 executing program 0:
syz_io_uring_setup(0xfffffffd, &(0x7f0000000400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000004c0))

03:17:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 16)

03:17:21 executing program 1:
shmctl$IPC_RMID(0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil)
shmctl$IPC_RMID(0x0, 0x0) (async)
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (async)
shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) (async)

[  270.642774][T18086] RDX: 000000000000000f RSI: 00007f2598e3f1e0 RDI: 0000000000000003
03:17:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x0, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

[  270.642787][T18086] RBP: 00007f2598e3f1d0 R08: 0000000000000000 R09: 0000000010000000
[  270.642801][T18086] R10: 0000000000008011 R11: 0000000000000246 R12: 0000000000000001
03:17:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
socket(0xb, 0x6, 0x6)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)

03:17:21 executing program 0:
syz_io_uring_setup(0xfffffffd, &(0x7f0000000400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000004c0))

[  270.642815][T18086] R13: 00007ffd79b7193f R14: 00007f2598e3f300 R15: 0000000000022000
[  270.642851][T18086]  </TASK>
[  271.979520][T18196] FAULT_INJECTION: forcing a failure.
03:17:22 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)

03:17:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 17)

[  271.979520][T18196] name fail_usercopy, interval 1, probability 0, space 0, times 0
03:17:22 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x1, 0x4, [{0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x1000, 0x2000}, {0xffffffffffffffff, 0x0, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0000000}]})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000500)={{0x0, 0x8, 0x2, 0x1000, 0x8, 0x7, 0x7, 0x4, 0x8, 0x10001, 0x4, 0x400, 0x0, 0x66e88201, 0x200}})
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$P9_RLERRORu(r1, &(0x7f0000000600)={0x15, 0x7, 0x2, {{0x8, 'syztnl1\x00'}}}, 0x15)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14, 0x13, 0x2, {0x1, 0x1}}, 0x14)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RLERRORu(r2, &(0x7f0000000600)={0x15, 0x7, 0x2, {{0x8, 'syztnl1\x00'}}}, 0x15)
write$P9_RRENAME(r2, &(0x7f00000000c0)={0x7, 0x15, 0x2}, 0x7)

03:17:22 executing program 0:
syz_io_uring_setup(0xfffffffd, &(0x7f0000000400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), 0x0)

03:17:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)

[  271.979553][T18196] CPU: 1 PID: 18196 Comm: syz-executor.3 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
03:17:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x0, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:22 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)

03:17:22 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x1, 0x4, [{0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x1000, 0x2000}, {0xffffffffffffffff, 0x0, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0000000}]})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000500)={{0x0, 0x8, 0x2, 0x1000, 0x8, 0x7, 0x7, 0x4, 0x8, 0x10001, 0x4, 0x400, 0x0, 0x66e88201, 0x200}})
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$P9_RLERRORu(r1, &(0x7f0000000600)={0x15, 0x7, 0x2, {{0x8, 'syztnl1\x00'}}}, 0x15) (async)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14, 0x13, 0x2, {0x1, 0x1}}, 0x14)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RLERRORu(r2, &(0x7f0000000600)={0x15, 0x7, 0x2, {{0x8, 'syztnl1\x00'}}}, 0x15) (async)
write$P9_RRENAME(r2, &(0x7f00000000c0)={0x7, 0x15, 0x2}, 0x7)

[  271.979579][T18196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
03:17:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 18)

03:17:22 executing program 0:
syz_io_uring_setup(0xfffffffd, &(0x7f0000000400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), 0x0)

03:17:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)

[  271.979593][T18196] Call Trace:
[  271.979599][T18196]  <TASK>
[  271.979607][T18196]  dump_stack_lvl+0xcd/0x134
03:17:22 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)

[  271.979644][T18196]  should_fail.cold+0x5/0xa
[  271.979675][T18196]  _copy_to_user+0x2a/0x140
[  271.979718][T18196]  io_uring_setup.cold+0x18da/0x2802
03:17:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x0, 0x7, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

[  271.979806][T18196]  ? io_sqe_buffers_register+0x1b0/0x1b0
03:17:22 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x1, 0x4, [{0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x1000, 0x2000}, {0xffffffffffffffff, 0x0, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0000000}]})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000500)={{0x0, 0x8, 0x2, 0x1000, 0x8, 0x7, 0x7, 0x4, 0x8, 0x10001, 0x4, 0x400, 0x0, 0x66e88201, 0x200}}) (async)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
write$P9_RLERRORu(r1, &(0x7f0000000600)={0x15, 0x7, 0x2, {{0x8, 'syztnl1\x00'}}}, 0x15) (async)
write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14, 0x13, 0x2, {0x1, 0x1}}, 0x14) (async)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RLERRORu(r2, &(0x7f0000000600)={0x15, 0x7, 0x2, {{0x8, 'syztnl1\x00'}}}, 0x15)
write$P9_RRENAME(r2, &(0x7f00000000c0)={0x7, 0x15, 0x2}, 0x7)

03:17:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 19)

03:17:22 executing program 0:
syz_io_uring_setup(0xfffffffd, &(0x7f0000000400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), 0x0)

03:17:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)

[  271.979862][T18196]  ? syscall_enter_from_user_mode+0x21/0x70
[  271.979914][T18196]  do_syscall_64+0x35/0xb0
[  271.979945][T18196]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
03:17:22 executing program 5:
syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)

[  271.979974][T18196] RIP: 0033:0x7f45056890e9
03:17:22 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000bc0)={'syztnl1\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
socket$l2tp(0x2, 0x2, 0x73)

03:17:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$dri(&(0x7f0000001a00), 0x111, 0x404041)

03:17:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x0, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

[  271.979992][T18196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
03:17:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 20)

03:17:22 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)

03:17:22 executing program 5:
syz_open_dev$dri(0x0, 0x111, 0x404041)

[  271.980015][T18196] RSP: 002b:00007f45068320e8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
03:17:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x0, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x0, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

[  271.980039][T18196] RAX: ffffffffffffffda RBX: 00007f450579bf60 RCX: 00007f45056890e9
[  271.980056][T18196] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 0000000000002b2a
03:17:22 executing program 4:
bind$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)

03:17:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 21)

03:17:22 executing program 5:
syz_open_dev$dri(0x0, 0x111, 0x404041)

[  271.980071][T18196] RBP: 0000000020000400 R08: 00000000200004c0 R09: 00000000200004c0
[  271.980087][T18196] R10: 0000000020000480 R11: 0000000000000206 R12: 00000000200004c0
[  271.980101][T18196] R13: 0000000020ffc000 R14: 0000000020000480 R15: 0000000020ffb000
[  271.980134][T18196]  </TASK>
03:17:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x0, 0x0, 0x6, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

[  272.144928][T18205] socket: no more sockets
[  272.290257][T18222] socket: no more sockets
03:17:22 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000bc0)={'syztnl1\x00', 0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (async)
socket$l2tp(0x2, 0x2, 0x73)

03:17:22 executing program 4:
bind$netlink(0xffffffffffffffff, 0x0, 0x0)

03:17:22 executing program 5:
syz_open_dev$dri(0x0, 0x111, 0x404041)

03:17:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 22)

03:17:22 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000bc0)={'syztnl1\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
socket$l2tp(0x2, 0x2, 0x73)

03:17:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x0, 0x0, 0x0, 0x3ff, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:22 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000bc0)={'syztnl1\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
socket$l2tp(0x2, 0x2, 0x73)

03:17:23 executing program 5:
syz_open_dev$dri(&(0x7f0000001a00), 0x0, 0x404041)

03:17:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 23)

03:17:23 executing program 5:
syz_open_dev$dri(&(0x7f0000001a00), 0x0, 0x0)

03:17:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 24)

03:17:23 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000bc0)={'syztnl1\x00', 0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}}) (async)
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
socket$l2tp(0x2, 0x2, 0x73)

03:17:23 executing program 5:
syz_open_dev$dri(&(0x7f0000001a00), 0x0, 0x0)

03:17:23 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000bc0)={'syztnl1\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
socket$l2tp(0x2, 0x2, 0x73)

03:17:23 executing program 5:
syz_open_dev$dri(&(0x7f0000001a00), 0x0, 0x0)

03:17:23 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000bc0)={'syztnl1\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
socket$l2tp(0x2, 0x2, 0x73)

03:17:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 25)

03:17:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x6, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 26)

03:17:23 executing program 5:
syz_open_dev$dri(&(0x7f0000001a00), 0x0, 0x0)

03:17:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x9, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:23 executing program 5:
syz_open_dev$dri(&(0x7f0000001a00), 0x0, 0x0)

03:17:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 27)

03:17:23 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x20}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:23 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000bc0)={'syztnl1\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
socket$l2tp(0x2, 0x2, 0x73)

03:17:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x7fffffffffffffff, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:23 executing program 5:
syz_open_dev$dri(&(0x7f0000001a00), 0x0, 0x0)

03:17:23 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000bc0)={'syztnl1\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
socket$l2tp(0x2, 0x2, 0x73)

03:17:23 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x20}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x20}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (async)

03:17:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 28)

03:17:24 executing program 5:
syz_open_dev$dri(0x0, 0x0, 0x0)

03:17:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:24 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x20}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 29)

03:17:24 executing program 5:
syz_open_dev$dri(0x0, 0x0, 0x0)

03:17:24 executing program 1:
socket$vsock_stream(0x28, 0x1, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:24 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000bc0)={'syztnl1\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})
socket$l2tp(0x2, 0x2, 0x73)

03:17:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:24 executing program 5:
syz_open_dev$dri(0x0, 0x0, 0x0)

03:17:24 executing program 1:
socket$vsock_stream(0x28, 0x1, 0x0) (async)
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 30)

03:17:24 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000bc0)={'syztnl1\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:24 executing program 5:
socket$vsock_stream(0x28, 0x1, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x3}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:24 executing program 1:
socket$vsock_stream(0x28, 0x1, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
socket$vsock_stream(0x28, 0x1, 0x0) (async)
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (async)

03:17:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 31)

03:17:24 executing program 5:
socket$vsock_stream(0x28, 0x1, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:24 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f0000000000))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x100013, r0, 0x10000000)
socket$inet6_dccp(0xa, 0x6, 0x0)

03:17:24 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000bc0)={'syztnl1\x00', 0x0})
socket$l2tp(0x2, 0x2, 0x73)

03:17:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x7fffffffffffffff}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:24 executing program 5:
socket$vsock_stream(0x28, 0x1, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:24 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000bc0)={'syztnl1\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})

03:17:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 32)

03:17:24 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f0000000000))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x100013, r0, 0x10000000) (async)
socket$inet6_dccp(0xa, 0x6, 0x0)

03:17:24 executing program 5:
socket$vsock_stream(0x28, 0x1, 0x0)

03:17:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x7fffffffffffffff}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:24 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f0000000000))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x100013, r0, 0x10000000) (async, rerun: 64)
socket$inet6_dccp(0xa, 0x6, 0x0) (rerun: 64)

03:17:24 executing program 5:
socket$vsock_stream(0x28, 0x1, 0x0)

03:17:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 33)

03:17:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x7fffffffffffffff}, 0x1f, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:25 executing program 0:
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$l2tp(0x2, 0x2, 0x73)

03:17:25 executing program 5:
socket$vsock_stream(0x28, 0x1, 0x0)

03:17:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 34)

03:17:25 executing program 5:
socket$vsock_stream(0x28, 0x1, 0x0)

03:17:25 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})

03:17:25 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@polexpire={0x1cc, 0x1b, 0x10, 0x70bd2b, 0x25dfdbfc, {{{@in=@rand_addr=0x64010100, @in6=@empty, 0x4e24, 0x5, 0x4e23, 0x7f, 0x2, 0xa0, 0x40, 0x2c, 0x0, 0xffffffffffffffff}, {0x5, 0x7, 0x6, 0x6, 0xfff, 0x9, 0x5, 0x7}, {0x6, 0x3, 0xacba, 0x1}, 0x4, 0x6e6bb9, 0x0, 0x1, 0x99d44b32a8760f85}, 0x80}, [@algo_aead={0x10b, 0x12, {{'morus640-sse2\x00'}, 0x5f8, 0x200, "abdc6780db476af55a6e6a43062c7faf2ff1f57b178f372333fb7accdbac4ce7f4db96f7b4b227f8e3e0eada9375268b3c4c755cfa9cafd18061084412bd31ed5bc8b2a0104ebab42f4a136284cbe8e65a13c90e62cbedaa6ec5925bb03d2184133454a4345fefb17b9032f61dfeebcb9f6892d0c42e5bd4432af5bb152408f3caed4c8a111baf7a811c09263e11b7d41f614d97226045c2f6cd18b0e407e78e648d80c87b278d3b66622d4a16ab6ba15e17a1353f91a8adcc4321c395adcf"}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:25 executing program 0:
socket$l2tp(0x2, 0x2, 0x73)

03:17:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x7fffffffffffffff, 0x3}, 0x0, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 35)

03:17:25 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000bc0)={'syztnl1\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})

03:17:25 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@polexpire={0x1cc, 0x1b, 0x10, 0x70bd2b, 0x25dfdbfc, {{{@in=@rand_addr=0x64010100, @in6=@empty, 0x4e24, 0x5, 0x4e23, 0x7f, 0x2, 0xa0, 0x40, 0x2c, 0x0, 0xffffffffffffffff}, {0x5, 0x7, 0x6, 0x6, 0xfff, 0x9, 0x5, 0x7}, {0x6, 0x3, 0xacba, 0x1}, 0x4, 0x6e6bb9, 0x0, 0x1, 0x99d44b32a8760f85}, 0x80}, [@algo_aead={0x10b, 0x12, {{'morus640-sse2\x00'}, 0x5f8, 0x200, "abdc6780db476af55a6e6a43062c7faf2ff1f57b178f372333fb7accdbac4ce7f4db96f7b4b227f8e3e0eada9375268b3c4c755cfa9cafd18061084412bd31ed5bc8b2a0104ebab42f4a136284cbe8e65a13c90e62cbedaa6ec5925bb03d2184133454a4345fefb17b9032f61dfeebcb9f6892d0c42e5bd4432af5bb152408f3caed4c8a111baf7a811c09263e11b7d41f614d97226045c2f6cd18b0e407e78e648d80c87b278d3b66622d4a16ab6ba15e17a1353f91a8adcc4321c395adcf"}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:25 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@polexpire={0x1cc, 0x1b, 0x10, 0x70bd2b, 0x25dfdbfc, {{{@in=@rand_addr=0x64010100, @in6=@empty, 0x4e24, 0x5, 0x4e23, 0x7f, 0x2, 0xa0, 0x40, 0x2c, 0x0, 0xffffffffffffffff}, {0x5, 0x7, 0x6, 0x6, 0xfff, 0x9, 0x5, 0x7}, {0x6, 0x3, 0xacba, 0x1}, 0x4, 0x6e6bb9, 0x0, 0x1, 0x99d44b32a8760f85}, 0x80}, [@algo_aead={0x10b, 0x12, {{'morus640-sse2\x00'}, 0x5f8, 0x200, "abdc6780db476af55a6e6a43062c7faf2ff1f57b178f372333fb7accdbac4ce7f4db96f7b4b227f8e3e0eada9375268b3c4c755cfa9cafd18061084412bd31ed5bc8b2a0104ebab42f4a136284cbe8e65a13c90e62cbedaa6ec5925bb03d2184133454a4345fefb17b9032f61dfeebcb9f6892d0c42e5bd4432af5bb152408f3caed4c8a111baf7a811c09263e11b7d41f614d97226045c2f6cd18b0e407e78e648d80c87b278d3b66622d4a16ab6ba15e17a1353f91a8adcc4321c395adcf"}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:25 executing program 4:
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})

03:17:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 36)

03:17:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x7fffffffffffffff, 0x3}, 0x0, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:25 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@polexpire={0x1cc, 0x1b, 0x10, 0x70bd2b, 0x25dfdbfc, {{{@in=@rand_addr=0x64010100, @in6=@empty, 0x4e24, 0x5, 0x4e23, 0x7f, 0x2, 0xa0, 0x40, 0x2c, 0x0, 0xffffffffffffffff}, {0x5, 0x7, 0x6, 0x6, 0xfff, 0x9, 0x5, 0x7}, {0x6, 0x3, 0xacba, 0x1}, 0x4, 0x6e6bb9, 0x0, 0x1, 0x99d44b32a8760f85}, 0x80}, [@algo_aead={0x10b, 0x12, {{'morus640-sse2\x00'}, 0x5f8, 0x200, "abdc6780db476af55a6e6a43062c7faf2ff1f57b178f372333fb7accdbac4ce7f4db96f7b4b227f8e3e0eada9375268b3c4c755cfa9cafd18061084412bd31ed5bc8b2a0104ebab42f4a136284cbe8e65a13c90e62cbedaa6ec5925bb03d2184133454a4345fefb17b9032f61dfeebcb9f6892d0c42e5bd4432af5bb152408f3caed4c8a111baf7a811c09263e11b7d41f614d97226045c2f6cd18b0e407e78e648d80c87b278d3b66622d4a16ab6ba15e17a1353f91a8adcc4321c395adcf"}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:25 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@polexpire={0x1cc, 0x1b, 0x10, 0x70bd2b, 0x25dfdbfc, {{{@in=@rand_addr=0x64010100, @in6=@empty, 0x4e24, 0x5, 0x4e23, 0x7f, 0x2, 0xa0, 0x40, 0x2c, 0x0, 0xffffffffffffffff}, {0x5, 0x7, 0x6, 0x6, 0xfff, 0x9, 0x5, 0x7}, {0x6, 0x3, 0xacba, 0x1}, 0x4, 0x6e6bb9, 0x0, 0x1, 0x99d44b32a8760f85}, 0x80}, [@algo_aead={0x10b, 0x12, {{'morus640-sse2\x00'}, 0x5f8, 0x200, "abdc6780db476af55a6e6a43062c7faf2ff1f57b178f372333fb7accdbac4ce7f4db96f7b4b227f8e3e0eada9375268b3c4c755cfa9cafd18061084412bd31ed5bc8b2a0104ebab42f4a136284cbe8e65a13c90e62cbedaa6ec5925bb03d2184133454a4345fefb17b9032f61dfeebcb9f6892d0c42e5bd4432af5bb152408f3caed4c8a111baf7a811c09263e11b7d41f614d97226045c2f6cd18b0e407e78e648d80c87b278d3b66622d4a16ab6ba15e17a1353f91a8adcc4321c395adcf"}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:25 executing program 4:
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})

03:17:25 executing program 1:
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x200, 0x0, 0x0, 0x2d2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x7fffffffffffffff, 0x3}, 0x0, 0x6e6bb5, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:25 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@polexpire={0x1cc, 0x1b, 0x10, 0x70bd2b, 0x25dfdbfc, {{{@in=@rand_addr=0x64010100, @in6=@empty, 0x4e24, 0x5, 0x4e23, 0x7f, 0x2, 0xa0, 0x40, 0x2c, 0x0, 0xffffffffffffffff}, {0x5, 0x7, 0x6, 0x6, 0xfff, 0x9, 0x5, 0x7}, {0x6, 0x3, 0xacba, 0x1}, 0x4, 0x6e6bb9, 0x0, 0x1, 0x99d44b32a8760f85}, 0x80}, [@algo_aead={0x10b, 0x12, {{'morus640-sse2\x00'}, 0x5f8, 0x200, "abdc6780db476af55a6e6a43062c7faf2ff1f57b178f372333fb7accdbac4ce7f4db96f7b4b227f8e3e0eada9375268b3c4c755cfa9cafd18061084412bd31ed5bc8b2a0104ebab42f4a136284cbe8e65a13c90e62cbedaa6ec5925bb03d2184133454a4345fefb17b9032f61dfeebcb9f6892d0c42e5bd4432af5bb152408f3caed4c8a111baf7a811c09263e11b7d41f614d97226045c2f6cd18b0e407e78e648d80c87b278d3b66622d4a16ab6ba15e17a1353f91a8adcc4321c395adcf"}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:25 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000bc0)={'syztnl1\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})

03:17:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 37)

03:17:25 executing program 4:
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})

03:17:25 executing program 1:
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x200, 0x0, 0x0, 0x2d2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:25 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@polexpire={0x1cc, 0x1b, 0x10, 0x70bd2b, 0x25dfdbfc, {{{@in=@rand_addr=0x64010100, @in6=@empty, 0x4e24, 0x5, 0x4e23, 0x7f, 0x2, 0xa0, 0x40, 0x2c, 0x0, 0xffffffffffffffff}, {0x5, 0x7, 0x6, 0x6, 0xfff, 0x9, 0x5, 0x7}, {0x6, 0x3, 0xacba, 0x1}, 0x4, 0x6e6bb9, 0x0, 0x1, 0x99d44b32a8760f85}, 0x80}, [@algo_aead={0x10b, 0x12, {{'morus640-sse2\x00'}, 0x5f8, 0x200, "abdc6780db476af55a6e6a43062c7faf2ff1f57b178f372333fb7accdbac4ce7f4db96f7b4b227f8e3e0eada9375268b3c4c755cfa9cafd18061084412bd31ed5bc8b2a0104ebab42f4a136284cbe8e65a13c90e62cbedaa6ec5925bb03d2184133454a4345fefb17b9032f61dfeebcb9f6892d0c42e5bd4432af5bb152408f3caed4c8a111baf7a811c09263e11b7d41f614d97226045c2f6cd18b0e407e78e648d80c87b278d3b66622d4a16ab6ba15e17a1353f91a8adcc4321c395adcf"}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)

03:17:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x7fffffffffffffff, 0x3}, 0x1f, 0x0, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:25 executing program 4:
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})

03:17:25 executing program 5:
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@polexpire={0x1cc, 0x1b, 0x10, 0x70bd2b, 0x25dfdbfc, {{{@in=@rand_addr=0x64010100, @in6=@empty, 0x4e24, 0x5, 0x4e23, 0x7f, 0x2, 0xa0, 0x40, 0x2c, 0x0, 0xffffffffffffffff}, {0x5, 0x7, 0x6, 0x6, 0xfff, 0x9, 0x5, 0x7}, {0x6, 0x3, 0xacba, 0x1}, 0x4, 0x6e6bb9, 0x0, 0x1, 0x99d44b32a8760f85}, 0x80}, [@algo_aead={0x10b, 0x12, {{'morus640-sse2\x00'}, 0x5f8, 0x200, "abdc6780db476af55a6e6a43062c7faf2ff1f57b178f372333fb7accdbac4ce7f4db96f7b4b227f8e3e0eada9375268b3c4c755cfa9cafd18061084412bd31ed5bc8b2a0104ebab42f4a136284cbe8e65a13c90e62cbedaa6ec5925bb03d2184133454a4345fefb17b9032f61dfeebcb9f6892d0c42e5bd4432af5bb152408f3caed4c8a111baf7a811c09263e11b7d41f614d97226045c2f6cd18b0e407e78e648d80c87b278d3b66622d4a16ab6ba15e17a1353f91a8adcc4321c395adcf"}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)

03:17:25 executing program 1:
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x200, 0x0, 0x0, 0x2d2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 38)

03:17:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x7fffffffffffffff, 0x3}, 0x1f, 0x0, 0x0, 0x1, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:25 executing program 5:
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@polexpire={0x1cc, 0x1b, 0x10, 0x70bd2b, 0x25dfdbfc, {{{@in=@rand_addr=0x64010100, @in6=@empty, 0x4e24, 0x5, 0x4e23, 0x7f, 0x2, 0xa0, 0x40, 0x2c, 0x0, 0xffffffffffffffff}, {0x5, 0x7, 0x6, 0x6, 0xfff, 0x9, 0x5, 0x7}, {0x6, 0x3, 0xacba, 0x1}, 0x4, 0x6e6bb9, 0x0, 0x1, 0x99d44b32a8760f85}, 0x80}, [@algo_aead={0x10b, 0x12, {{'morus640-sse2\x00'}, 0x5f8, 0x200, "abdc6780db476af55a6e6a43062c7faf2ff1f57b178f372333fb7accdbac4ce7f4db96f7b4b227f8e3e0eada9375268b3c4c755cfa9cafd18061084412bd31ed5bc8b2a0104ebab42f4a136284cbe8e65a13c90e62cbedaa6ec5925bb03d2184133454a4345fefb17b9032f61dfeebcb9f6892d0c42e5bd4432af5bb152408f3caed4c8a111baf7a811c09263e11b7d41f614d97226045c2f6cd18b0e407e78e648d80c87b278d3b66622d4a16ab6ba15e17a1353f91a8adcc4321c395adcf"}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)

03:17:26 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000bc0)={'syztnl1\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})

03:17:26 executing program 4:
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})

03:17:26 executing program 1:
r0 = io_uring_setup(0x31a7, &(0x7f0000000000)={0x0, 0xf49a, 0x2, 0x1, 0x23d})
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x4, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 39)

03:17:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x7fffffffffffffff, 0x3}, 0x1f, 0x0, 0x0, 0x0, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:26 executing program 5:
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@polexpire={0x1cc, 0x1b, 0x10, 0x70bd2b, 0x25dfdbfc, {{{@in=@rand_addr=0x64010100, @in6=@empty, 0x4e24, 0x5, 0x4e23, 0x7f, 0x2, 0xa0, 0x40, 0x2c, 0x0, 0xffffffffffffffff}, {0x5, 0x7, 0x6, 0x6, 0xfff, 0x9, 0x5, 0x7}, {0x6, 0x3, 0xacba, 0x1}, 0x4, 0x6e6bb9, 0x0, 0x1, 0x99d44b32a8760f85}, 0x80}, [@algo_aead={0x10b, 0x12, {{'morus640-sse2\x00'}, 0x5f8, 0x200, "abdc6780db476af55a6e6a43062c7faf2ff1f57b178f372333fb7accdbac4ce7f4db96f7b4b227f8e3e0eada9375268b3c4c755cfa9cafd18061084412bd31ed5bc8b2a0104ebab42f4a136284cbe8e65a13c90e62cbedaa6ec5925bb03d2184133454a4345fefb17b9032f61dfeebcb9f6892d0c42e5bd4432af5bb152408f3caed4c8a111baf7a811c09263e11b7d41f614d97226045c2f6cd18b0e407e78e648d80c87b278d3b66622d4a16ab6ba15e17a1353f91a8adcc4321c395adcf"}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)

03:17:26 executing program 5:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@polexpire={0x1cc, 0x1b, 0x10, 0x70bd2b, 0x25dfdbfc, {{{@in=@rand_addr=0x64010100, @in6=@empty, 0x4e24, 0x5, 0x4e23, 0x7f, 0x2, 0xa0, 0x40, 0x2c, 0x0, 0xffffffffffffffff}, {0x5, 0x7, 0x6, 0x6, 0xfff, 0x9, 0x5, 0x7}, {0x6, 0x3, 0xacba, 0x1}, 0x4, 0x6e6bb9, 0x0, 0x1, 0x99d44b32a8760f85}, 0x80}, [@algo_aead={0x10b, 0x12, {{'morus640-sse2\x00'}, 0x5f8, 0x200, "abdc6780db476af55a6e6a43062c7faf2ff1f57b178f372333fb7accdbac4ce7f4db96f7b4b227f8e3e0eada9375268b3c4c755cfa9cafd18061084412bd31ed5bc8b2a0104ebab42f4a136284cbe8e65a13c90e62cbedaa6ec5925bb03d2184133454a4345fefb17b9032f61dfeebcb9f6892d0c42e5bd4432af5bb152408f3caed4c8a111baf7a811c09263e11b7d41f614d97226045c2f6cd18b0e407e78e648d80c87b278d3b66622d4a16ab6ba15e17a1353f91a8adcc4321c395adcf"}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)

03:17:26 executing program 4:
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})

03:17:26 executing program 1:
r0 = io_uring_setup(0x31a7, &(0x7f0000000000)={0x0, 0xf49a, 0x2, 0x1, 0x23d})
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x4, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 40)

03:17:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x7fffffffffffffff, 0x3}, 0x1f, 0x0, 0x0, 0x0, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:26 executing program 5:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@polexpire={0x1cc, 0x1b, 0x10, 0x70bd2b, 0x25dfdbfc, {{{@in=@rand_addr=0x64010100, @in6=@empty, 0x4e24, 0x5, 0x4e23, 0x7f, 0x2, 0xa0, 0x40, 0x2c, 0x0, 0xffffffffffffffff}, {0x5, 0x7, 0x6, 0x6, 0xfff, 0x9, 0x5, 0x7}, {0x6, 0x3, 0xacba, 0x1}, 0x4, 0x6e6bb9, 0x0, 0x1, 0x99d44b32a8760f85}, 0x80}, [@algo_aead={0x10b, 0x12, {{'morus640-sse2\x00'}, 0x5f8, 0x200, "abdc6780db476af55a6e6a43062c7faf2ff1f57b178f372333fb7accdbac4ce7f4db96f7b4b227f8e3e0eada9375268b3c4c755cfa9cafd18061084412bd31ed5bc8b2a0104ebab42f4a136284cbe8e65a13c90e62cbedaa6ec5925bb03d2184133454a4345fefb17b9032f61dfeebcb9f6892d0c42e5bd4432af5bb152408f3caed4c8a111baf7a811c09263e11b7d41f614d97226045c2f6cd18b0e407e78e648d80c87b278d3b66622d4a16ab6ba15e17a1353f91a8adcc4321c395adcf"}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)

03:17:26 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})

03:17:26 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0)

03:17:26 executing program 1:
r0 = io_uring_setup(0x31a7, &(0x7f0000000000)={0x0, 0xf49a, 0x2, 0x1, 0x23d})
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x4, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

03:17:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 41)

03:17:26 executing program 5:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@polexpire={0x1cc, 0x1b, 0x10, 0x70bd2b, 0x25dfdbfc, {{{@in=@rand_addr=0x64010100, @in6=@empty, 0x4e24, 0x5, 0x4e23, 0x7f, 0x2, 0xa0, 0x40, 0x2c, 0x0, 0xffffffffffffffff}, {0x5, 0x7, 0x6, 0x6, 0xfff, 0x9, 0x5, 0x7}, {0x6, 0x3, 0xacba, 0x1}, 0x4, 0x6e6bb9, 0x0, 0x1, 0x99d44b32a8760f85}, 0x80}, [@algo_aead={0x10b, 0x12, {{'morus640-sse2\x00'}, 0x5f8, 0x200, "abdc6780db476af55a6e6a43062c7faf2ff1f57b178f372333fb7accdbac4ce7f4db96f7b4b227f8e3e0eada9375268b3c4c755cfa9cafd18061084412bd31ed5bc8b2a0104ebab42f4a136284cbe8e65a13c90e62cbedaa6ec5925bb03d2184133454a4345fefb17b9032f61dfeebcb9f6892d0c42e5bd4432af5bb152408f3caed4c8a111baf7a811c09263e11b7d41f614d97226045c2f6cd18b0e407e78e648d80c87b278d3b66622d4a16ab6ba15e17a1353f91a8adcc4321c395adcf"}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)

03:17:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x7fffffffffffffff, 0x3}, 0x1f, 0x0, 0x0, 0x0, 0x2}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:26 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x80)

03:17:26 executing program 1:
r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x6, 0x1014c0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000240))
r1 = syz_open_dev$vcsu(&(0x7f0000000740), 0x2a33e080, 0xa80)
write$P9_RATTACH(r1, &(0x7f0000000140)={0x14, 0x69, 0x0, {0x40, 0x2, 0x5}}, 0x14)
r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x400100)
r3 = syz_io_uring_setup(0x4ab, &(0x7f00000002c0)={0x0, 0xf831, 0x1, 0x2, 0x9a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
syz_io_uring_setup(0x400000, &(0x7f0000000400)={0x0, 0x0, 0x21, 0x0, 0x3c9, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
write$P9_RMKDIR(r2, &(0x7f00000001c0)={0x14, 0x49, 0x1, {0x80}}, 0x14)
syz_open_dev$vcsu(&(0x7f0000000280), 0xd27, 0x4000)
write$P9_RMKNOD(r1, &(0x7f0000000180)={0x14, 0x13, 0x2, {0x8, 0x1}}, 0x14)

03:17:26 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0)

03:17:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x7fffffffffffffff, 0x3}, 0x1f}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:26 executing program 0:
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})

03:17:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 42)

03:17:26 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x80)

03:17:26 executing program 1:
r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x6, 0x1014c0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000240)) (async)
r1 = syz_open_dev$vcsu(&(0x7f0000000740), 0x2a33e080, 0xa80)
write$P9_RATTACH(r1, &(0x7f0000000140)={0x14, 0x69, 0x0, {0x40, 0x2, 0x5}}, 0x14)
r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x400100) (async)
r3 = syz_io_uring_setup(0x4ab, &(0x7f00000002c0)={0x0, 0xf831, 0x1, 0x2, 0x9a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
syz_io_uring_setup(0x400000, &(0x7f0000000400)={0x0, 0x0, 0x21, 0x0, 0x3c9, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (async)
write$P9_RMKDIR(r2, &(0x7f00000001c0)={0x14, 0x49, 0x1, {0x80}}, 0x14) (async)
syz_open_dev$vcsu(&(0x7f0000000280), 0xd27, 0x4000) (async)
write$P9_RMKNOD(r1, &(0x7f0000000180)={0x14, 0x13, 0x2, {0x8, 0x1}}, 0x14)

03:17:26 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0)

03:17:26 executing program 0:
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})

03:17:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 43)

03:17:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x39c, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1f0d68031a4171f, 0x0, 0x9, 0xfff, 0xfffffffb, 0x20}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0xff, 0x1000, 0x1ff, 0xffffffff}, {{@in6=@private1, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x8, 0xffff, 0x3d6}]}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x7fffffffffffffff, 0x3}, 0x1f}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:26 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', 0x0})

03:17:26 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x80)

03:17:26 executing program 1:
r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x6, 0x1014c0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000240))
r1 = syz_open_dev$vcsu(&(0x7f0000000740), 0x2a33e080, 0xa80)
write$P9_RATTACH(r1, &(0x7f0000000140)={0x14, 0x69, 0x0, {0x40, 0x2, 0x5}}, 0x14)
r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x400100)
r3 = syz_io_uring_setup(0x4ab, &(0x7f00000002c0)={0x0, 0xf831, 0x1, 0x2, 0x9a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
syz_io_uring_setup(0x400000, &(0x7f0000000400)={0x0, 0x0, 0x21, 0x0, 0x3c9, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
write$P9_RMKDIR(r2, &(0x7f00000001c0)={0x14, 0x49, 0x1, {0x80}}, 0x14)
syz_open_dev$vcsu(&(0x7f0000000280), 0xd27, 0x4000)
write$P9_RMKNOD(r1, &(0x7f0000000180)={0x14, 0x13, 0x2, {0x8, 0x1}}, 0x14)
syz_open_dev$vcsu(&(0x7f0000000200), 0x6, 0x1014c0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000240)) (async)
syz_open_dev$vcsu(&(0x7f0000000740), 0x2a33e080, 0xa80) (async)
write$P9_RATTACH(r1, &(0x7f0000000140)={0x14, 0x69, 0x0, {0x40, 0x2, 0x5}}, 0x14) (async)
syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x400100) (async)
syz_io_uring_setup(0x4ab, &(0x7f00000002c0)={0x0, 0xf831, 0x1, 0x2, 0x9a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (async)
syz_io_uring_setup(0x400000, &(0x7f0000000400)={0x0, 0x0, 0x21, 0x0, 0x3c9, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (async)
write$P9_RMKDIR(r2, &(0x7f00000001c0)={0x14, 0x49, 0x1, {0x80}}, 0x14) (async)
syz_open_dev$vcsu(&(0x7f0000000280), 0xd27, 0x4000) (async)
write$P9_RMKNOD(r1, &(0x7f0000000180)={0x14, 0x13, 0x2, {0x8, 0x1}}, 0x14) (async)

03:17:26 executing program 0:
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})

03:17:26 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', 0x0})

03:17:26 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@polexpire={0x1cc, 0x1b, 0x10, 0x70bd2b, 0x25dfdbfc, {{{@in=@rand_addr=0x64010100, @in6=@empty, 0x4e24, 0x5, 0x4e23, 0x7f, 0x2, 0xa0, 0x40, 0x2c, 0x0, 0xffffffffffffffff}, {0x5, 0x7, 0x6, 0x6, 0xfff, 0x9, 0x5, 0x7}, {0x6, 0x3, 0xacba, 0x1}, 0x4, 0x6e6bb9, 0x0, 0x1, 0x99d44b32a8760f85}, 0x80}, [@algo_aead={0x10b, 0x12, {{'morus640-sse2\x00'}, 0x5f8, 0x200, "abdc6780db476af55a6e6a43062c7faf2ff1f57b178f372333fb7accdbac4ce7f4db96f7b4b227f8e3e0eada9375268b3c4c755cfa9cafd18061084412bd31ed5bc8b2a0104ebab42f4a136284cbe8e65a13c90e62cbedaa6ec5925bb03d2184133454a4345fefb17b9032f61dfeebcb9f6892d0c42e5bd4432af5bb152408f3caed4c8a111baf7a811c09263e11b7d41f614d97226045c2f6cd18b0e407e78e648d80c87b278d3b66622d4a16ab6ba15e17a1353f91a8adcc4321c395adcf"}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)

03:17:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x2d8, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x7fffffffffffffff, 0x3}, 0x1f}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 44)

03:17:26 executing program 0:
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})

03:17:26 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', 0x0})

03:17:26 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x59}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004)

03:17:26 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x80)

03:17:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x2d8, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @policy={0xac, 0x7, {{@in6=@ipv4, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x7fffffffffffffff, 0x3}, 0x1f}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 45)

03:17:27 executing program 0:
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})

03:17:27 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})

03:17:27 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x59}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004)

03:17:27 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x80)

03:17:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x2d8, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @policy={0xac, 0x7, {{@in6=@ipv4, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x7fffffffffffffff, 0x3}, 0x1f}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 46)

03:17:27 executing program 0:
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})

03:17:27 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x4, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})

03:17:27 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x59}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004)

03:17:27 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x80)

03:17:27 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0)

03:17:27 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})

03:17:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x2d8, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @policy={0xac, 0x7, {{@in6=@ipv4, @in6=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x7fffffffffffffff, 0x3}, 0x1f}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 47)

03:17:27 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
r1 = syz_open_dev$vcsu(&(0x7f0000000740), 0x2a33e080, 0xa80)
write$P9_RATTACH(r1, &(0x7f0000000780)={0x14, 0x69, 0x0, {0x2, 0x2}}, 0x14)
syz_io_uring_setup(0x7427, &(0x7f0000000100)={0x0, 0x96c0, 0x0, 0x3, 0xfb, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fed000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r2 = syz_io_uring_setup(0x4552, &(0x7f0000000000)={0x0, 0x87ce, 0x10, 0x1, 0x22a, 0x0, r0}, &(0x7f0000f0c000/0x4000)=nil, &(0x7f0000db5000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xa, 0x12, r2, 0x10000000)

03:17:27 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)

03:17:27 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0)

03:17:27 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x80, 0x7, 0xffff0000, 0x5}})

03:17:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x2d8, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @policy={0xac, 0x7, {{@in6=@ipv4, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x7fffffffffffffff, 0x3}, 0x1f}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 48)

03:17:27 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (async)
r1 = syz_open_dev$vcsu(&(0x7f0000000740), 0x2a33e080, 0xa80)
write$P9_RATTACH(r1, &(0x7f0000000780)={0x14, 0x69, 0x0, {0x2, 0x2}}, 0x14) (async)
syz_io_uring_setup(0x7427, &(0x7f0000000100)={0x0, 0x96c0, 0x0, 0x3, 0xfb, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fed000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r2 = syz_io_uring_setup(0x4552, &(0x7f0000000000)={0x0, 0x87ce, 0x10, 0x1, 0x22a, 0x0, r0}, &(0x7f0000f0c000/0x4000)=nil, &(0x7f0000db5000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xa, 0x12, r2, 0x10000000)

03:17:27 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)

03:17:27 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x0, 0x7, 0xffff0000, 0x5}})

03:17:27 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0)

03:17:27 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)

03:17:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 49)

03:17:27 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (async)
r1 = syz_open_dev$vcsu(&(0x7f0000000740), 0x2a33e080, 0xa80)
write$P9_RATTACH(r1, &(0x7f0000000780)={0x14, 0x69, 0x0, {0x2, 0x2}}, 0x14)
syz_io_uring_setup(0x7427, &(0x7f0000000100)={0x0, 0x96c0, 0x0, 0x3, 0xfb, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fed000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async)
r2 = syz_io_uring_setup(0x4552, &(0x7f0000000000)={0x0, 0x87ce, 0x10, 0x1, 0x22a, 0x0, r0}, &(0x7f0000f0c000/0x4000)=nil, &(0x7f0000db5000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xa, 0x12, r2, 0x10000000)

03:17:27 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', 0x0})

03:17:27 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x0, 0x0, 0xffff0000, 0x5}})

03:17:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x2d8, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @policy={0xac, 0x7, {{@in6=@ipv4, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x7fffffffffffffff, 0x3}, 0x1f}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

03:17:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x6, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (fail_nth: 50)

03:17:27 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@polexpire={0x1cc, 0x1b, 0x0, 0x70bd2b, 0x25dfdbfc, {{{@in=@rand_addr=0x64010100, @in6=@empty, 0x4e24, 0x5, 0x4e23, 0x7f, 0x2, 0xa0, 0x40, 0x2c, 0x0, 0xffffffffffffffff}, {0x5, 0x7, 0x6, 0x6, 0xfff, 0x9, 0x5, 0x7}, {0x6, 0x3, 0xacba, 0x1}, 0x4, 0x6e6bb9, 0x0, 0x1, 0x99d44b32a8760f85}, 0x80}, [@algo_aead={0x10b, 0x12, {{'morus640-sse2\x00'}, 0x5f8, 0x200, "abdc6780db476af55a6e6a43062c7faf2ff1f57b178f372333fb7accdbac4ce7f4db96f7b4b227f8e3e0eada9375268b3c4c755cfa9cafd18061084412bd31ed5bc8b2a0104ebab42f4a136284cbe8e65a13c90e62cbedaa6ec5925bb03d2184133454a4345fefb17b9032f61dfeebcb9f6892d0c42e5bd4432af5bb152408f3caed4c8a111baf7a811c09263e11b7d41f614d97226045c2f6cd18b0e407e78e648d80c87b278d3b66622d4a16ab6ba15e17a1353f91a8adcc4321c395adcf"}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)

03:17:27 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x0, 0x0, 0x0, 0x5}})

03:17:27 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', 0x0})

03:17:27 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
syz_io_uring_setup(0x6b14, &(0x7f0000000000)={0x0, 0xb163, 0x2, 0x2, 0x384}, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

03:17:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r1 = socket(0xb, 0x0, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x84704000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
syz_io_uring_setup(0x2b2a, &(0x7f0000000400)={0x0, 0x2438, 0x0, 0x0, 0x16c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480)=<r3=>0x0, &(0x7f00000004c0))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7f})
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000015c0)=@flushsa={0x2d8, 0x1c, 0x4, 0x70bd2b, 0x25dfdbff, {0x2b}, [@XFRMA_IF_ID={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@mcast2, 0x4d5}, 0x2, @in6=@empty, 0x3501, 0x3, 0x3, 0xbc, 0x4, 0x3a6bb9bb, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x2, 0x0, 0x1dbc, 0x3ff, 0xefb05715}]}, @etimer_thresh={0x8, 0xc, 0x80000000}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x1, 0x401, 0x3472580, 0x4, 0x1, 0xfffffffffffffe01, 0x0, 0xae1}, {0x3f, 0x3, 0x6, 0x10001}, 0x10000, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7a76}, @sec_ctx={0x90, 0x8, {0x8c, 0x8, 0x0, 0x7f, 0x84, "c63483cacb5abeb4da0644dcca7ffa5f872f16a73af24f1abac7d12c18b2cf4102fc4539900dda7ad7889d8f0ebba3de0e6dce90a327a1b9cf38420bb1e8b8659f722ac7c2fac014bacf88e85cb0d6149143154a8d911390cac7d544000662c3fd4a34cbfd69778d88cda6244ac135dfbbafe81428b3ced9e47932733fa893b9073812a8"}}, @policy={0xac, 0x7, {{@in6=@ipv4, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x7fffffffffffffff, 0x3, 0x4}, {0x0, 0x0, 0x7fffffffffffffff, 0x3}, 0x1f}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x84}, 0x20040000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

[  278.839215][T18762] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  278.851083][T18762] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  278.859517][T18762] CPU: 0 PID: 18762 Comm: syz-executor.3 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
[  278.869779][T18762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  278.879851][T18762] RIP: 0010:__rb_erase_color+0x159/0xdb0
[  278.885569][T18762] Code: 89 ed 48 89 c5 e9 f5 fe ff ff 4c 8d 45 10 4c 89 c0 48 c1 e8 03 80 3c 18 00 0f 85 3a 08 00 00 4c 8b 65 10 4c 89 e0 48 c1 e8 03 <80> 3c 18 00 0f 85 6a 08 00 00 49 8b 04 24 49 8d 7c 24 08 48 89 f9
[  278.905284][T18762] RSP: 0018:ffffc90004907a48 EFLAGS: 00010246
[  278.911372][T18762] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000
[  278.919370][T18762] RDX: ffffed1002faae17 RSI: ffff888017d570b8 RDI: ffff88807a304b20
[  278.927363][T18762] RBP: ffff88807a304b20 R08: ffff88807a304b30 R09: ffff888017d570af
[  278.935357][T18762] R10: ffffffff81b026c8 R11: 0000000000000001 R12: 0000000000000000
[  278.943354][T18762] R13: 0000000000000000 R14: ffff888017d570b8 R15: ffffffff81b014b0
[  278.951347][T18762] FS:  0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
[  278.960298][T18762] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  278.966912][T18762] CR2: 0000000000000000 CR3: 0000000064353000 CR4: 00000000003506f0
[  278.974912][T18762] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  278.982994][T18762] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  278.990987][T18762] Call Trace:
[  278.994281][T18762]  <TASK>
[  278.997225][T18762]  vma_interval_tree_remove+0x694/0xed0
[  279.002930][T18762]  unlink_file_vma+0xbd/0x110
[  279.007695][T18762]  free_pgtables+0x255/0x420
[  279.012324][T18762]  ? free_pgd_range+0xbf0/0xbf0
[  279.017249][T18762]  exit_mmap+0x1ff/0x740
[  279.021529][T18762]  ? __ia32_sys_remap_file_pages+0x150/0x150
[  279.027556][T18762]  __mmput+0x128/0x4c0
[  279.031820][T18762]  mmput+0x5c/0x70
[  279.035570][T18762]  do_exit+0xa18/0x2a00
[  279.039841][T18762]  ? preempt_schedule_thunk+0x16/0x18
[  279.045286][T18762]  ? mm_update_next_owner+0x7b0/0x7b0
[  279.050699][T18762]  ? preempt_schedule_thunk+0x16/0x18
[  279.056105][T18762]  ? trace_hardirqs_on+0x38/0x1c0
[  279.061224][T18762]  do_group_exit+0xd2/0x2f0
[  279.065766][T18762]  __x64_sys_exit_group+0x3a/0x50
[  279.070843][T18762]  do_syscall_64+0x35/0xb0
[  279.075303][T18762]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
[  279.081226][T18762] RIP: 0033:0x7f45056890e9
[  279.085661][T18762] Code: Unable to access opcode bytes at RIP 0x7f45056890bf.
[  279.093041][T18762] RSP: 002b:00007f4506831af8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  279.101484][T18762] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f45056890e9
[  279.109480][T18762] RDX: 00007f4505689132 RSI: 0000000000000000 RDI: 000000000000000b
[  279.117476][T18762] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000
[  279.125470][T18762] R10: 0000000000000005 R11: 0000000000000246 R12: 00000000200004c0
[  279.133470][T18762] R13: 0000000020ffc000 R14: 0000000020000480 R15: 0000000020ffb000
[  279.141473][T18762]  </TASK>
[  279.144507][T18762] Modules linked in:
[  279.153625][T18762] ---[ end trace 0000000000000000 ]---
[  279.153639][T18762] RIP: 0010:__rb_erase_color+0x159/0xdb0
[  279.153683][T18762] Code: 89 ed 48 89 c5 e9 f5 fe ff ff 4c 8d 45 10 4c 89 c0 48 c1 e8 03 80 3c 18 00 0f 85 3a 08 00 00 4c 8b 65 10 4c 89 e0 48 c1 e8 03 <80> 3c 18 00 0f 85 6a 08 00 00 49 8b 04 24 49 8d 7c 24 08 48 89 f9
[  279.153706][T18762] RSP: 0018:ffffc90004907a48 EFLAGS: 00010246
[  279.153725][T18762] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000
[  279.153740][T18762] RDX: ffffed1002faae17 RSI: ffff888017d570b8 RDI: ffff88807a304b20
[  279.153756][T18762] RBP: ffff88807a304b20 R08: ffff88807a304b30 R09: ffff888017d570af
[  279.153772][T18762] R10: ffffffff81b026c8 R11: 0000000000000001 R12: 0000000000000000
[  279.153787][T18762] R13: 0000000000000000 R14: ffff888017d570b8 R15: ffffffff81b014b0
[  279.153803][T18762] FS:  0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
[  279.153826][T18762] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  279.153844][T18762] CR2: 0000000000000000 CR3: 0000000061e79000 CR4: 00000000003506f0
[  279.153858][T18762] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  279.153872][T18762] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  279.153888][T18762] Kernel panic - not syncing: Fatal exception
[  279.276314][T18762] Kernel Offset: disabled
[  279.280635][T18762] Rebooting in 86400 seconds..