0x10001}}, {0x3, 0x40, {0x0, 0x100}}, {0x8, 0x1, {0x2, 0xffff2b1d}}, {0x9, 0xffff, {0x2, 0x3ff}}, {0x7, 0x4, {0x1, 0x6}}, {0x9, 0x8000, {0x0, 0x4}}, {0x3, 0x2, {0x3, 0x4}}, {0x3f, 0x1, {0x0, 0x20}}, {0x7ff, 0x5, {0x0, 0x6}}, {0x1, 0xffff, {0x2, 0xa0}}, {0x2ca3, 0x80, {0x1, 0x2}}, {0x0, 0x6, {0x3, 0x6}}, {0x7, 0x5, {0x2, 0x81}}, {0x9b6, 0x8, {0x0, 0xe6}}, {0xcb7, 0x9, {0x2, 0xf7}}, {0x8, 0x9, {0x0, 0xf9d}}, {0x8001, 0x4, {0x0, 0x8}}, {0xa9, 0x7f, {0x0, 0x6}}, {0x1, 0x101, {0x0, 0x7}}, {0x7fff, 0x7fff, {0x1, 0x5}}, {0xffff, 0x6, {0x1, 0x80}}, {0x3dce, 0x0, {0x2, 0x101}}, {0x401, 0x7fff, {0x2, 0x7}}, {0x3d1, 0x5, {0x2, 0x3}}, {0x8000, 0x8000, {0x1, 0x2d}}, {0x1ff, 0x0, {0x0, 0x1}}, {0xfff, 0x2, {0x3, 0x4e4}}, {0x3000, 0xffff, {0x3, 0x1d16}}, {0x1000, 0x73, {0x0, 0x43ac}}, {0x8000, 0x48b1, {0x0, 0x4000000}}, {0x1f, 0x7e, {0x1}}, {0x7, 0x9, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x80, 0x1, 0x5, 0xffff, 0x0, 'syz1\x00', "c733761c95d6271e6033df15f4bb276b72a0d43dab3350af2d48a782a9db0be5", "5429939a340782c68492a1412fc1fe971a7316c0f606fdcaeed9c8f581d85c22", [{0x47, 0x3a, {0x3, 0x100}}, {0x7fff, 0x4, {0x2, 0x401}}, {0x6, 0x5c, {0x3, 0x400}}, {0x7, 0x889, {0x0, 0x9}}, {0x7, 0xfbff, {0x1, 0x3}}, {0x6, 0x1, {0x0, 0x1170}}, {0x7, 0xff, {0x2, 0xff}}, {0x6, 0x1c90, {0x3, 0x7fffffff}}, {0x4, 0x12, {0x2, 0x3cb}}, {0xfc54, 0x5ac, {0x3, 0xb18f}}, {0xd89, 0x5, {0x2, 0x6}}, {0x1000, 0x2, {0x1, 0x7}}, {0x46, 0x800, {0x2, 0x3}}, {0x3, 0x2, {0x2, 0x4000}}, {0x7, 0x6, {0x1}}, {0x6, 0x6, {0x3ebfa52e2e3211b8, 0x9}}, {0x1, 0x3, {0x1, 0x8}}, {0x7, 0x13, {0x3, 0x5}}, {0x5a3, 0x0, {0x2, 0x5}}, {0x3, 0x2, {0x0, 0x1}}, {0xffff, 0x5, {0x3, 0xfff}}, {0x6b1, 0x6, {0x0, 0x80000001}}, {0x7, 0x8, {0x1, 0xeb63}}, {0xfffc, 0x20, {0x2, 0x8001}}, {0x49d, 0x8, {0x2, 0x9}}, {0x8, 0x20, {0x2, 0x800}}, {0x4, 0x1000, {0x2, 0xe6}}, {0x800, 0x9, {0x3, 0x7f4}}, {0x40, 0x2, {0x2, 0x8001}}, {0x5, 0x1f, {0xaa25b481705fae22, 0x9}}, {0x3, 0x6, {0x1, 0x2e49}}, {0x200, 0x7ff, {0x2}}, {0x2f30, 0x3, {0x3, 0x22e}}, {0x5, 0xfff9, {0x2, 0x4}}, {0x4758, 0x7ff, {0x1, 0xa4}}, {0x5, 0x4, {0x1, 0xffff}}, {0x8001, 0x7, {0x0, 0x687f4099}}, {0x8001, 0x7ff, {0x3, 0x2}}, {0x5, 0x2, {0x2, 0x10001}}, {0x5e78, 0x8001, {0x3, 0x100}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x300010c0}, 0x4c095) r1 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x85) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5421, &(0x7f0000000000)) 02:29:18 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r2) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r3) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r4) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r5) socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r6) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5421, &(0x7f0000000000)) socket$qrtr(0x2a, 0x2, 0x0) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r2) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r3) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r4) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r5) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r6) (async) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5421, &(0x7f0000000000)) (async) 02:29:18 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="988ad3832cd914ab79dd011c7793bd2182f3acd8aa1526ad2b342a49ce136a3b7081d9cfd097bd68cd0bb910e3790b0369c821175a9d9e75ac364eb2ce1ea6c3fc890cdb9b0f79c95b5e1eef5fdfb08d07b9414752a0978f872e84e71dcc5c33ec64ee2c9edd944be97d6317f14109a7550f753aa9da9c086a1b76", 0x7b}, {&(0x7f0000000080)="bf4fdf424fe8a489710699fd513e841cbdc9d515f2604bdf23dda52f48f4d4c4d628137d6cf55e5efaf5f9efa8dc79bcb3bae8ab5a16dbf7d726145a40a1faf503f84d75c93f61afc566b1032bba8e09813c415d763b508262f8b146275beef714945ebc30765e9bd763c75bd840918879f1a3b832b324dc792292162314834c290713cc9aa7c948ef70701383b93c76f417b4bd5aacbd950668fd5b9c91f96d13bfb9e1a3476322eeda6c3f4f5ed03e8b132755e5d5481c", 0xb8}], 0xb}, 0x38) 02:29:18 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) recvmsg$qrtr(r0, &(0x7f0000001500)={&(0x7f0000000000), 0xc, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/213, 0xd5}, {&(0x7f0000001140)=""/132, 0x84}, {&(0x7f0000001200)}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/163, 0xa3}, {&(0x7f0000001380)=""/33, 0x21}], 0x7, &(0x7f0000001440)=[{0xa0, 0x0, 0x0, ""/142}], 0xa0, 0x40002000}, 0x38, 0x40012000) 02:29:18 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) sendmsg$qrtr(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:18 executing program 3: socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={@private=0xa010101, 0x1, 0x0, 0x90, 0x0, [{}, {@dev}, {@remote}, {@remote}, {@empty}, {@loopback}, {@empty}, {@remote}, {@private}]}}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) (async) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0x710, 0x0, 0x5, 0x900, 0x0, 0x0, {0x7, 0x0, 0x3}, [{{0x254, 0x1, {{0x3, 0x9}, 0xcd, 0x53, 0x1f, 0x1, 0x1c, 'syz0\x00', "1c1ea720bc5177cb9400e73c6e09e005b571a35353a5baf9efdda01603c34adc", "89cfc786837efc7480c84f762d9293887fae5c3032dcf325509eebc8baba10c8", [{0x200, 0x909, {0x2, 0x40000000}}, {0x2, 0x8001, {0x3, 0x5}}, {0x5, 0xff2c, {0x0, 0x9}}, {0x1, 0x2, {0x0, 0x5}}, {0x4, 0x7, {0x0, 0x5}}, {0x140, 0x7fff, {0x2, 0x8}}, {0x400, 0x401, {0x1, 0x9}}, {0x3, 0x5, {0x1}}, {0xaa8, 0x4, {0x3, 0x9}}, {0xf6d, 0x3, {0x0, 0x3cdd}}, {0x8001, 0x4, {0x2, 0x9}}, {0x1, 0x8001, {0x1, 0x5}}, {0x8, 0x5, {0x3, 0x3}}, {0x3, 0x39a3, {0x3, 0x6}}, {0x97, 0x7, {0x3, 0x412664c0}}, {0x0, 0x3ab, {0x6, 0x9}}, {0x0, 0x6, {0x1, 0x8}}, {0x1, 0x90, {0x3, 0x2f1d}}, {0x1000, 0x7, {0x2, 0x7}}, {0x7, 0x6, {0x0, 0x6}}, {0xf00, 0x401, {0x2, 0x3}}, {0xc244, 0x9, {0x3, 0x6}}, {0x1a7, 0x100, {0x3, 0xded}}, {0x4, 0x4, {0x1, 0x1}}, {0x5, 0x240, {0x0, 0x6}}, {0x20, 0x3, {0x0, 0x80000000}}, {0x200, 0x10, {0x0, 0xa841}}, {0xff82, 0x0, {0x3, 0x5f}}, {0x2, 0xffff, {0x2, 0x40}}, {0x6, 0x40, {0x2, 0x1ff}}, {0x61b, 0x1, {0x3, 0x4}}, {0x9, 0x7, {0x0, 0x1}}, {0x7, 0x4000, {0x2, 0x2}}, {0xfff, 0xbae, {0x3, 0x6}}, {0x7ff, 0x7ff, {0x0, 0x5}}, {0x0, 0x1, {0x4, 0xeb}}, {0x6726, 0x0, {0x3, 0x9}}, {0x3f, 0x6, {0x0, 0x3}}, {0x3f, 0xfff9, {0x3}}, {0x8001, 0x9, {0x0, 0x69}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0x8, 0x1f, 0x2, 0x3, 0x1a, 'syz1\x00', "8fc027909ea711fa1fec0722f4b34e321cad35f3ceaa176b75cd15e62afccec3", "5854a2f60f75be3c4d1469d883c994152673925129edd265bd446df183d15f82", [{0x5, 0x5, {0x0, 0x1}}, {0x7, 0x3cc, {0x2, 0x29}}, {0x8, 0x0, {0x3, 0x9}}, {0x8001, 0x9, {0x3, 0x6}}, {0x9, 0x80, {0x2, 0x6c05}}, {0x0, 0x400, {0x1, 0x400}}, {0xfffd, 0xfff7, {0x1}}, {0x7, 0x6, {0x0, 0x349559dd}}, {0x2, 0x6, {0x3, 0x10001}}, {0x3, 0x40, {0x0, 0x100}}, {0x8, 0x1, {0x2, 0xffff2b1d}}, {0x9, 0xffff, {0x2, 0x3ff}}, {0x7, 0x4, {0x1, 0x6}}, {0x9, 0x8000, {0x0, 0x4}}, {0x3, 0x2, {0x3, 0x4}}, {0x3f, 0x1, {0x0, 0x20}}, {0x7ff, 0x5, {0x0, 0x6}}, {0x1, 0xffff, {0x2, 0xa0}}, {0x2ca3, 0x80, {0x1, 0x2}}, {0x0, 0x6, {0x3, 0x6}}, {0x7, 0x5, {0x2, 0x81}}, {0x9b6, 0x8, {0x0, 0xe6}}, {0xcb7, 0x9, {0x2, 0xf7}}, {0x8, 0x9, {0x0, 0xf9d}}, {0x8001, 0x4, {0x0, 0x8}}, {0xa9, 0x7f, {0x0, 0x6}}, {0x1, 0x101, {0x0, 0x7}}, {0x7fff, 0x7fff, {0x1, 0x5}}, {0xffff, 0x6, {0x1, 0x80}}, {0x3dce, 0x0, {0x2, 0x101}}, {0x401, 0x7fff, {0x2, 0x7}}, {0x3d1, 0x5, {0x2, 0x3}}, {0x8000, 0x8000, {0x1, 0x2d}}, {0x1ff, 0x0, {0x0, 0x1}}, {0xfff, 0x2, {0x3, 0x4e4}}, {0x3000, 0xffff, {0x3, 0x1d16}}, {0x1000, 0x73, {0x0, 0x43ac}}, {0x8000, 0x48b1, {0x0, 0x4000000}}, {0x1f, 0x7e, {0x1}}, {0x7, 0x9, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x80, 0x1, 0x5, 0xffff, 0x0, 'syz1\x00', "c733761c95d6271e6033df15f4bb276b72a0d43dab3350af2d48a782a9db0be5", "5429939a340782c68492a1412fc1fe971a7316c0f606fdcaeed9c8f581d85c22", [{0x47, 0x3a, {0x3, 0x100}}, {0x7fff, 0x4, {0x2, 0x401}}, {0x6, 0x5c, {0x3, 0x400}}, {0x7, 0x889, {0x0, 0x9}}, {0x7, 0xfbff, {0x1, 0x3}}, {0x6, 0x1, {0x0, 0x1170}}, {0x7, 0xff, {0x2, 0xff}}, {0x6, 0x1c90, {0x3, 0x7fffffff}}, {0x4, 0x12, {0x2, 0x3cb}}, {0xfc54, 0x5ac, {0x3, 0xb18f}}, {0xd89, 0x5, {0x2, 0x6}}, {0x1000, 0x2, {0x1, 0x7}}, {0x46, 0x800, {0x2, 0x3}}, {0x3, 0x2, {0x2, 0x4000}}, {0x7, 0x6, {0x1}}, {0x6, 0x6, {0x3ebfa52e2e3211b8, 0x9}}, {0x1, 0x3, {0x1, 0x8}}, {0x7, 0x13, {0x3, 0x5}}, {0x5a3, 0x0, {0x2, 0x5}}, {0x3, 0x2, {0x0, 0x1}}, {0xffff, 0x5, {0x3, 0xfff}}, {0x6b1, 0x6, {0x0, 0x80000001}}, {0x7, 0x8, {0x1, 0xeb63}}, {0xfffc, 0x20, {0x2, 0x8001}}, {0x49d, 0x8, {0x2, 0x9}}, {0x8, 0x20, {0x2, 0x800}}, {0x4, 0x1000, {0x2, 0xe6}}, {0x800, 0x9, {0x3, 0x7f4}}, {0x40, 0x2, {0x2, 0x8001}}, {0x5, 0x1f, {0xaa25b481705fae22, 0x9}}, {0x3, 0x6, {0x1, 0x2e49}}, {0x200, 0x7ff, {0x2}}, {0x2f30, 0x3, {0x3, 0x22e}}, {0x5, 0xfff9, {0x2, 0x4}}, {0x4758, 0x7ff, {0x1, 0xa4}}, {0x5, 0x4, {0x1, 0xffff}}, {0x8001, 0x7, {0x0, 0x687f4099}}, {0x8001, 0x7ff, {0x3, 0x2}}, {0x5, 0x2, {0x2, 0x10001}}, {0x5e78, 0x8001, {0x3, 0x100}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x300010c0}, 0x4c095) r1 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x85) (async) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5421, &(0x7f0000000000)) 02:29:18 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) (async) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) (async) recvmsg$qrtr(r0, &(0x7f0000001500)={&(0x7f0000000000), 0xc, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/213, 0xd5}, {&(0x7f0000001140)=""/132, 0x84}, {&(0x7f0000001200)}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/163, 0xa3}, {&(0x7f0000001380)=""/33, 0x21}], 0x7, &(0x7f0000001440)=[{0xa0, 0x0, 0x0, ""/142}], 0xa0, 0x40002000}, 0x38, 0x40012000) 02:29:18 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="988ad3832cd914ab79dd011c7793bd2182f3acd8aa1526ad2b342a49ce136a3b7081d9cfd097bd68cd0bb910e3790b0369c821175a9d9e75ac364eb2ce1ea6c3fc890cdb9b0f79c95b5e1eef5fdfb08d07b9414752a0978f872e84e71dcc5c33ec64ee2c9edd944be97d6317f14109a7550f753aa9da9c086a1b76", 0x7b}, {&(0x7f0000000080)="bf4fdf424fe8a489710699fd513e841cbdc9d515f2604bdf23dda52f48f4d4c4d628137d6cf55e5efaf5f9efa8dc79bcb3bae8ab5a16dbf7d726145a40a1faf503f84d75c93f61afc566b1032bba8e09813c415d763b508262f8b146275beef714945ebc30765e9bd763c75bd840918879f1a3b832b324dc792292162314834c290713cc9aa7c948ef70701383b93c76f417b4bd5aacbd950668fd5b9c91f96d13bfb9e1a3476322eeda6c3f4f5ed03e8b132755e5d5481c", 0xb8}], 0xb}, 0x38) 02:29:18 executing program 2: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000080)) socket$qrtr(0x2a, 0x2, 0x0) r0 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) socketpair(0x26, 0x800, 0xf4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x2, &(0x7f0000000000)) 02:29:18 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) (async) sendmsg$qrtr(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:18 executing program 3: socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={@private=0xa010101, 0x1, 0x0, 0x90, 0x0, [{}, {@dev}, {@remote}, {@remote}, {@empty}, {@loopback}, {@empty}, {@remote}, {@private}]}}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0x710, 0x0, 0x5, 0x900, 0x0, 0x0, {0x7, 0x0, 0x3}, [{{0x254, 0x1, {{0x3, 0x9}, 0xcd, 0x53, 0x1f, 0x1, 0x1c, 'syz0\x00', "1c1ea720bc5177cb9400e73c6e09e005b571a35353a5baf9efdda01603c34adc", "89cfc786837efc7480c84f762d9293887fae5c3032dcf325509eebc8baba10c8", [{0x200, 0x909, {0x2, 0x40000000}}, {0x2, 0x8001, {0x3, 0x5}}, {0x5, 0xff2c, {0x0, 0x9}}, {0x1, 0x2, {0x0, 0x5}}, {0x4, 0x7, {0x0, 0x5}}, {0x140, 0x7fff, {0x2, 0x8}}, {0x400, 0x401, {0x1, 0x9}}, {0x3, 0x5, {0x1}}, {0xaa8, 0x4, {0x3, 0x9}}, {0xf6d, 0x3, {0x0, 0x3cdd}}, {0x8001, 0x4, {0x2, 0x9}}, {0x1, 0x8001, {0x1, 0x5}}, {0x8, 0x5, {0x3, 0x3}}, {0x3, 0x39a3, {0x3, 0x6}}, {0x97, 0x7, {0x3, 0x412664c0}}, {0x0, 0x3ab, {0x6, 0x9}}, {0x0, 0x6, {0x1, 0x8}}, {0x1, 0x90, {0x3, 0x2f1d}}, {0x1000, 0x7, {0x2, 0x7}}, {0x7, 0x6, {0x0, 0x6}}, {0xf00, 0x401, {0x2, 0x3}}, {0xc244, 0x9, {0x3, 0x6}}, {0x1a7, 0x100, {0x3, 0xded}}, {0x4, 0x4, {0x1, 0x1}}, {0x5, 0x240, {0x0, 0x6}}, {0x20, 0x3, {0x0, 0x80000000}}, {0x200, 0x10, {0x0, 0xa841}}, {0xff82, 0x0, {0x3, 0x5f}}, {0x2, 0xffff, {0x2, 0x40}}, {0x6, 0x40, {0x2, 0x1ff}}, {0x61b, 0x1, {0x3, 0x4}}, {0x9, 0x7, {0x0, 0x1}}, {0x7, 0x4000, {0x2, 0x2}}, {0xfff, 0xbae, {0x3, 0x6}}, {0x7ff, 0x7ff, {0x0, 0x5}}, {0x0, 0x1, {0x4, 0xeb}}, {0x6726, 0x0, {0x3, 0x9}}, {0x3f, 0x6, {0x0, 0x3}}, {0x3f, 0xfff9, {0x3}}, {0x8001, 0x9, {0x0, 0x69}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0x8, 0x1f, 0x2, 0x3, 0x1a, 'syz1\x00', "8fc027909ea711fa1fec0722f4b34e321cad35f3ceaa176b75cd15e62afccec3", "5854a2f60f75be3c4d1469d883c994152673925129edd265bd446df183d15f82", [{0x5, 0x5, {0x0, 0x1}}, {0x7, 0x3cc, {0x2, 0x29}}, {0x8, 0x0, {0x3, 0x9}}, {0x8001, 0x9, {0x3, 0x6}}, {0x9, 0x80, {0x2, 0x6c05}}, {0x0, 0x400, {0x1, 0x400}}, {0xfffd, 0xfff7, {0x1}}, {0x7, 0x6, {0x0, 0x349559dd}}, {0x2, 0x6, {0x3, 0x10001}}, {0x3, 0x40, {0x0, 0x100}}, {0x8, 0x1, {0x2, 0xffff2b1d}}, {0x9, 0xffff, {0x2, 0x3ff}}, {0x7, 0x4, {0x1, 0x6}}, {0x9, 0x8000, {0x0, 0x4}}, {0x3, 0x2, {0x3, 0x4}}, {0x3f, 0x1, {0x0, 0x20}}, {0x7ff, 0x5, {0x0, 0x6}}, {0x1, 0xffff, {0x2, 0xa0}}, {0x2ca3, 0x80, {0x1, 0x2}}, {0x0, 0x6, {0x3, 0x6}}, {0x7, 0x5, {0x2, 0x81}}, {0x9b6, 0x8, {0x0, 0xe6}}, {0xcb7, 0x9, {0x2, 0xf7}}, {0x8, 0x9, {0x0, 0xf9d}}, {0x8001, 0x4, {0x0, 0x8}}, {0xa9, 0x7f, {0x0, 0x6}}, {0x1, 0x101, {0x0, 0x7}}, {0x7fff, 0x7fff, {0x1, 0x5}}, {0xffff, 0x6, {0x1, 0x80}}, {0x3dce, 0x0, {0x2, 0x101}}, {0x401, 0x7fff, {0x2, 0x7}}, {0x3d1, 0x5, {0x2, 0x3}}, {0x8000, 0x8000, {0x1, 0x2d}}, {0x1ff, 0x0, {0x0, 0x1}}, {0xfff, 0x2, {0x3, 0x4e4}}, {0x3000, 0xffff, {0x3, 0x1d16}}, {0x1000, 0x73, {0x0, 0x43ac}}, {0x8000, 0x48b1, {0x0, 0x4000000}}, {0x1f, 0x7e, {0x1}}, {0x7, 0x9, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x80, 0x1, 0x5, 0xffff, 0x0, 'syz1\x00', "c733761c95d6271e6033df15f4bb276b72a0d43dab3350af2d48a782a9db0be5", "5429939a340782c68492a1412fc1fe971a7316c0f606fdcaeed9c8f581d85c22", [{0x47, 0x3a, {0x3, 0x100}}, {0x7fff, 0x4, {0x2, 0x401}}, {0x6, 0x5c, {0x3, 0x400}}, {0x7, 0x889, {0x0, 0x9}}, {0x7, 0xfbff, {0x1, 0x3}}, {0x6, 0x1, {0x0, 0x1170}}, {0x7, 0xff, {0x2, 0xff}}, {0x6, 0x1c90, {0x3, 0x7fffffff}}, {0x4, 0x12, {0x2, 0x3cb}}, {0xfc54, 0x5ac, {0x3, 0xb18f}}, {0xd89, 0x5, {0x2, 0x6}}, {0x1000, 0x2, {0x1, 0x7}}, {0x46, 0x800, {0x2, 0x3}}, {0x3, 0x2, {0x2, 0x4000}}, {0x7, 0x6, {0x1}}, {0x6, 0x6, {0x3ebfa52e2e3211b8, 0x9}}, {0x1, 0x3, {0x1, 0x8}}, {0x7, 0x13, {0x3, 0x5}}, {0x5a3, 0x0, {0x2, 0x5}}, {0x3, 0x2, {0x0, 0x1}}, {0xffff, 0x5, {0x3, 0xfff}}, {0x6b1, 0x6, {0x0, 0x80000001}}, {0x7, 0x8, {0x1, 0xeb63}}, {0xfffc, 0x20, {0x2, 0x8001}}, {0x49d, 0x8, {0x2, 0x9}}, {0x8, 0x20, {0x2, 0x800}}, {0x4, 0x1000, {0x2, 0xe6}}, {0x800, 0x9, {0x3, 0x7f4}}, {0x40, 0x2, {0x2, 0x8001}}, {0x5, 0x1f, {0xaa25b481705fae22, 0x9}}, {0x3, 0x6, {0x1, 0x2e49}}, {0x200, 0x7ff, {0x2}}, {0x2f30, 0x3, {0x3, 0x22e}}, {0x5, 0xfff9, {0x2, 0x4}}, {0x4758, 0x7ff, {0x1, 0xa4}}, {0x5, 0x4, {0x1, 0xffff}}, {0x8001, 0x7, {0x0, 0x687f4099}}, {0x8001, 0x7ff, {0x3, 0x2}}, {0x5, 0x2, {0x2, 0x10001}}, {0x5e78, 0x8001, {0x3, 0x100}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x300010c0}, 0x4c095) r1 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x85) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5421, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={@private=0xa010101, 0x1, 0x0, 0x90, 0x0, [{}, {@dev}, {@remote}, {@remote}, {@empty}, {@loopback}, {@empty}, {@remote}, {@private}]}}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) (async) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0x710, 0x0, 0x5, 0x900, 0x0, 0x0, {0x7, 0x0, 0x3}, [{{0x254, 0x1, {{0x3, 0x9}, 0xcd, 0x53, 0x1f, 0x1, 0x1c, 'syz0\x00', "1c1ea720bc5177cb9400e73c6e09e005b571a35353a5baf9efdda01603c34adc", "89cfc786837efc7480c84f762d9293887fae5c3032dcf325509eebc8baba10c8", [{0x200, 0x909, {0x2, 0x40000000}}, {0x2, 0x8001, {0x3, 0x5}}, {0x5, 0xff2c, {0x0, 0x9}}, {0x1, 0x2, {0x0, 0x5}}, {0x4, 0x7, {0x0, 0x5}}, {0x140, 0x7fff, {0x2, 0x8}}, {0x400, 0x401, {0x1, 0x9}}, {0x3, 0x5, {0x1}}, {0xaa8, 0x4, {0x3, 0x9}}, {0xf6d, 0x3, {0x0, 0x3cdd}}, {0x8001, 0x4, {0x2, 0x9}}, {0x1, 0x8001, {0x1, 0x5}}, {0x8, 0x5, {0x3, 0x3}}, {0x3, 0x39a3, {0x3, 0x6}}, {0x97, 0x7, {0x3, 0x412664c0}}, {0x0, 0x3ab, {0x6, 0x9}}, {0x0, 0x6, {0x1, 0x8}}, {0x1, 0x90, {0x3, 0x2f1d}}, {0x1000, 0x7, {0x2, 0x7}}, {0x7, 0x6, {0x0, 0x6}}, {0xf00, 0x401, {0x2, 0x3}}, {0xc244, 0x9, {0x3, 0x6}}, {0x1a7, 0x100, {0x3, 0xded}}, {0x4, 0x4, {0x1, 0x1}}, {0x5, 0x240, {0x0, 0x6}}, {0x20, 0x3, {0x0, 0x80000000}}, {0x200, 0x10, {0x0, 0xa841}}, {0xff82, 0x0, {0x3, 0x5f}}, {0x2, 0xffff, {0x2, 0x40}}, {0x6, 0x40, {0x2, 0x1ff}}, {0x61b, 0x1, {0x3, 0x4}}, {0x9, 0x7, {0x0, 0x1}}, {0x7, 0x4000, {0x2, 0x2}}, {0xfff, 0xbae, {0x3, 0x6}}, {0x7ff, 0x7ff, {0x0, 0x5}}, {0x0, 0x1, {0x4, 0xeb}}, {0x6726, 0x0, {0x3, 0x9}}, {0x3f, 0x6, {0x0, 0x3}}, {0x3f, 0xfff9, {0x3}}, {0x8001, 0x9, {0x0, 0x69}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0x8, 0x1f, 0x2, 0x3, 0x1a, 'syz1\x00', "8fc027909ea711fa1fec0722f4b34e321cad35f3ceaa176b75cd15e62afccec3", "5854a2f60f75be3c4d1469d883c994152673925129edd265bd446df183d15f82", [{0x5, 0x5, {0x0, 0x1}}, {0x7, 0x3cc, {0x2, 0x29}}, {0x8, 0x0, {0x3, 0x9}}, {0x8001, 0x9, {0x3, 0x6}}, {0x9, 0x80, {0x2, 0x6c05}}, {0x0, 0x400, {0x1, 0x400}}, {0xfffd, 0xfff7, {0x1}}, {0x7, 0x6, {0x0, 0x349559dd}}, {0x2, 0x6, {0x3, 0x10001}}, {0x3, 0x40, {0x0, 0x100}}, {0x8, 0x1, {0x2, 0xffff2b1d}}, {0x9, 0xffff, {0x2, 0x3ff}}, {0x7, 0x4, {0x1, 0x6}}, {0x9, 0x8000, {0x0, 0x4}}, {0x3, 0x2, {0x3, 0x4}}, {0x3f, 0x1, {0x0, 0x20}}, {0x7ff, 0x5, {0x0, 0x6}}, {0x1, 0xffff, {0x2, 0xa0}}, {0x2ca3, 0x80, {0x1, 0x2}}, {0x0, 0x6, {0x3, 0x6}}, {0x7, 0x5, {0x2, 0x81}}, {0x9b6, 0x8, {0x0, 0xe6}}, {0xcb7, 0x9, {0x2, 0xf7}}, {0x8, 0x9, {0x0, 0xf9d}}, {0x8001, 0x4, {0x0, 0x8}}, {0xa9, 0x7f, {0x0, 0x6}}, {0x1, 0x101, {0x0, 0x7}}, {0x7fff, 0x7fff, {0x1, 0x5}}, {0xffff, 0x6, {0x1, 0x80}}, {0x3dce, 0x0, {0x2, 0x101}}, {0x401, 0x7fff, {0x2, 0x7}}, {0x3d1, 0x5, {0x2, 0x3}}, {0x8000, 0x8000, {0x1, 0x2d}}, {0x1ff, 0x0, {0x0, 0x1}}, {0xfff, 0x2, {0x3, 0x4e4}}, {0x3000, 0xffff, {0x3, 0x1d16}}, {0x1000, 0x73, {0x0, 0x43ac}}, {0x8000, 0x48b1, {0x0, 0x4000000}}, {0x1f, 0x7e, {0x1}}, {0x7, 0x9, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x80, 0x1, 0x5, 0xffff, 0x0, 'syz1\x00', "c733761c95d6271e6033df15f4bb276b72a0d43dab3350af2d48a782a9db0be5", "5429939a340782c68492a1412fc1fe971a7316c0f606fdcaeed9c8f581d85c22", [{0x47, 0x3a, {0x3, 0x100}}, {0x7fff, 0x4, {0x2, 0x401}}, {0x6, 0x5c, {0x3, 0x400}}, {0x7, 0x889, {0x0, 0x9}}, {0x7, 0xfbff, {0x1, 0x3}}, {0x6, 0x1, {0x0, 0x1170}}, {0x7, 0xff, {0x2, 0xff}}, {0x6, 0x1c90, {0x3, 0x7fffffff}}, {0x4, 0x12, {0x2, 0x3cb}}, {0xfc54, 0x5ac, {0x3, 0xb18f}}, {0xd89, 0x5, {0x2, 0x6}}, {0x1000, 0x2, {0x1, 0x7}}, {0x46, 0x800, {0x2, 0x3}}, {0x3, 0x2, {0x2, 0x4000}}, {0x7, 0x6, {0x1}}, {0x6, 0x6, {0x3ebfa52e2e3211b8, 0x9}}, {0x1, 0x3, {0x1, 0x8}}, {0x7, 0x13, {0x3, 0x5}}, {0x5a3, 0x0, {0x2, 0x5}}, {0x3, 0x2, {0x0, 0x1}}, {0xffff, 0x5, {0x3, 0xfff}}, {0x6b1, 0x6, {0x0, 0x80000001}}, {0x7, 0x8, {0x1, 0xeb63}}, {0xfffc, 0x20, {0x2, 0x8001}}, {0x49d, 0x8, {0x2, 0x9}}, {0x8, 0x20, {0x2, 0x800}}, {0x4, 0x1000, {0x2, 0xe6}}, {0x800, 0x9, {0x3, 0x7f4}}, {0x40, 0x2, {0x2, 0x8001}}, {0x5, 0x1f, {0xaa25b481705fae22, 0x9}}, {0x3, 0x6, {0x1, 0x2e49}}, {0x200, 0x7ff, {0x2}}, {0x2f30, 0x3, {0x3, 0x22e}}, {0x5, 0xfff9, {0x2, 0x4}}, {0x4758, 0x7ff, {0x1, 0xa4}}, {0x5, 0x4, {0x1, 0xffff}}, {0x8001, 0x7, {0x0, 0x687f4099}}, {0x8001, 0x7ff, {0x3, 0x2}}, {0x5, 0x2, {0x2, 0x10001}}, {0x5e78, 0x8001, {0x3, 0x100}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x300010c0}, 0x4c095) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x85) (async) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5421, &(0x7f0000000000)) (async) 02:29:18 executing program 2: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000080)) socket$qrtr(0x2a, 0x2, 0x0) r0 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) socketpair(0x26, 0x800, 0xf4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x2, &(0x7f0000000000)) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000080)) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) (async) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) (async) socketpair(0x26, 0x800, 0xf4, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x2, &(0x7f0000000000)) (async) 02:29:18 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="988ad3832cd914ab79dd011c7793bd2182f3acd8aa1526ad2b342a49ce136a3b7081d9cfd097bd68cd0bb910e3790b0369c821175a9d9e75ac364eb2ce1ea6c3fc890cdb9b0f79c95b5e1eef5fdfb08d07b9414752a0978f872e84e71dcc5c33ec64ee2c9edd944be97d6317f14109a7550f753aa9da9c086a1b76", 0x7b}, {&(0x7f0000000080)="bf4fdf424fe8a489710699fd513e841cbdc9d515f2604bdf23dda52f48f4d4c4d628137d6cf55e5efaf5f9efa8dc79bcb3bae8ab5a16dbf7d726145a40a1faf503f84d75c93f61afc566b1032bba8e09813c415d763b508262f8b146275beef714945ebc30765e9bd763c75bd840918879f1a3b832b324dc792292162314834c290713cc9aa7c948ef70701383b93c76f417b4bd5aacbd950668fd5b9c91f96d13bfb9e1a3476322eeda6c3f4f5ed03e8b132755e5d5481c", 0xb8}], 0xb}, 0x38) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="988ad3832cd914ab79dd011c7793bd2182f3acd8aa1526ad2b342a49ce136a3b7081d9cfd097bd68cd0bb910e3790b0369c821175a9d9e75ac364eb2ce1ea6c3fc890cdb9b0f79c95b5e1eef5fdfb08d07b9414752a0978f872e84e71dcc5c33ec64ee2c9edd944be97d6317f14109a7550f753aa9da9c086a1b76", 0x7b}, {&(0x7f0000000080)="bf4fdf424fe8a489710699fd513e841cbdc9d515f2604bdf23dda52f48f4d4c4d628137d6cf55e5efaf5f9efa8dc79bcb3bae8ab5a16dbf7d726145a40a1faf503f84d75c93f61afc566b1032bba8e09813c415d763b508262f8b146275beef714945ebc30765e9bd763c75bd840918879f1a3b832b324dc792292162314834c290713cc9aa7c948ef70701383b93c76f417b4bd5aacbd950668fd5b9c91f96d13bfb9e1a3476322eeda6c3f4f5ed03e8b132755e5d5481c", 0xb8}], 0xb}, 0x38) (async) 02:29:18 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5421, &(0x7f0000000040)) getgroups(0x1, &(0x7f0000000180)=[0x0]) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) sendmsg$qrtr(r1, &(0x7f00000016c0)={&(0x7f0000000000)={0x2a, 0x3, 0x7ffe}, 0xc, &(0x7f0000001440)=[{&(0x7f0000000080)="8c4340d5fc217abbd7c6d4c2efbeed28c91a80951cc50b2025970382f9e13b7871588d46e84df9d35a2754f17ebbe9c92098170a515b66cf10c04c380a", 0x3d}, {&(0x7f00000000c0)="9b076f59bb037a8a2a680c147ac38bb637bc375a7565b933381f80527beb988ed27eb142892c", 0x26}, {&(0x7f0000000100)="3628f5c8f2656c2c4d89d508cb4cde2918988013b51a5b604c952a318c8da9d733e8838143122112d863ba345107b86c54ab4da16444897e727b4e1232d68aa8d8a1f9760c437400fa962e5c4daa873cdd813fe19c9d7739e0b4ecaf74d2e5b409b513f0023ec4662377a33fd66f1caed362279c8f775328ad53cdbcba4e898566f835dfffad47039abc971a28b0952177d3bab9aec0e5b4430c0f8f16d0053a0e15b965d31ca2556ccbca5d124e7635952cdc012af48c49cc044cf9b9e7c7179dce544f6f304e269d8d7d14133a939b7ad0ae6e537e421008b1ac9da5a208f63e40238f2c54ff19150a7cc7192511f9cc33e7e53fb0c52ab5f560f4b22d16ab612f5d19e3d213ecd760edc75857c01b4cce0a742d289ebec801fa9ccf17435a927b5db63cb45b653f6cd6c5cd7123e0e0712bc321e1a3f5b8a0606a1659ca8ed13e0097293652d406862cff8c4d42d6d080d8e8c4936c974e88afc08441647b803f398d6c492ac7a5aa0958c02d321c5b7a14b69f71845648c0c8d33a8231129898d56d02a939e0dea827e55e2494bbb9974d40cc563fb34b0f56e4006bea2891b1bd3c7a55ae06ca827c4922d46ae26807ba6e283e258c27b53d00632df8358f04fb6dc5201b0b13acc5165da79cc3c41f333d418495b09b13de20a1713f36741183dd6176cdf82d180ae9b52ad2952a715b6de369e14359ea069e42d5fcd7cd8f22a5d2677ae0aa4b122500d352adaee4283f545b436c7a1e483ac02bb1e76f3d4dc65ef74836d5d35255039f2803a7cb86d410634f63d59828da3f589c8cecf5ecee4fd818602c1215c5244992ea0f24b9ec30b709d086491059df3f9778fec548cb4e31c0b92123907a0d636a7c130153eea8c8aa765dcfdb95e669046505defc58c8c1845db902f51adbf2ef86bee6393ab18b28ab5b2dba59bce8cc6d5db30e59844157394a7a6ba38e87a8c8a9d0925adaf18e8fbab731f01c088974977cf7bdaceda54903caf4146f80dbcb97b6a08ae41948c85fe1697f65e72c03bcfafe33eb89872f6d322d06d13793b7092eca319e462a11053ca720b9ba65e0abe4d62e8a85bf4e0e244818edb90b9103a9914c995fb146e4f745cb0dc8eaf07c0233986fa382e1faf8335c7554c72bb71eaca044a00851e88270f7f80c956644cb5ab328107c656d526042ff505169bfd4db2b9f1502ce568c07c8f33af5f4196c3d9dbe43a4e131731068b0a05ae347093a76f4edef88ba1bc0609250bdfdf871b78fa2042ee9e33494a9070949e5d631a21d3a6cb63dfd1a6c0b73a681c0c4be7d637003602f32882d47a6febe9dee369bd2edf0d8a5c2f93bf0e4f3032907e25effa404b93439c310f11e4f24e4eeac32972f3143ed09cb9e2f96a09374636c24a2341ef9277086c6c8a4faa3e69a093acb8a2a3dd33ec4162e71bb5f2568c76b45864d4cf4938286caf5249dcde86652ff6db011e6034b24ab46e5ee9a96fe17566db56bc4f3a90ea273aa8cae10b040751c04541df5d819d4ceb48b3b3d3bfb0d161299356af26b2622caa1bfd89f383e1c0953d54f74f0a217fc281ff9e27aae9319f5ad1969b2079b46e8a3d842ab92f802b01f0079aed1946287c92194d0996e3d23c55c0d71c3ffbb5465c87e45c8f3f26803820b0ed401a49536dac320f1f552cde34f13e09055059090e47eaaae1b7ad4e77842e10d863e76bd633602ea03adaafac8527448534f70172a5ad107c74e7a16031459f65b23b42ac3ea04fb58b48efdf0fee67a228527515a9da6d52e5cc955542be083b070680099a863bf0de164874eaa67a5b51a8309f5fb22463715dc07acc573a3d27f98344ae024ffec12f914b1f85f932c22b185513788fc6fb57dcba65d2973899fad48a90ee32bfea433c25023deea0c626b956a086c9a5340249e71121324e187ab4da4afcec3c3dc5762fa978dde5b228e2cc88a2f140d4460d9a45f34bfd0853665a60cdb1b357be4aa1733d623255b8e3fe7cd34153a768e0b47cc0569cf9521983023316ed86f57d655e34d0e25520d550bb5eebf07f821236f57dbd3cb4afaaafd221c69f2bf5b065a89ab91ade022bdc79eadf6d7f335641588b20798114c6988e2ea730cf5375d4a97bd60ffa5088b5b66083e670ef18c185d095920a345ec0fd80017d98f8cfcdd827287816f0e5637357b50afe5862680899b4c99b9438beb54fac64af04915cbbcb691f2f76386e07c775330300002e05027f534bf9715f175dabd1a69dcee516d25cd6e2d864852e3da6d563b787286675150a56b87d35cd64ef2e7a035b721f8dc09497e5493b4f6ae3b73d5c25bad1e43d3c349bd242be0e19cc979095483b201a7695c344615e681f71f8a98da833008a4d7b097cb7ae3db4b27d3abf9feb3f327347154fa3869614e772b45a74a4685650a4d720738856381d9fca53b8c225f771ab4eed2eca9b4146ca2df5c7f085a40f434aa435197371b33fbb99172864cb1c2ed7615e8cdaadd6674f9ba69596cbf0595dbe34f7b58fe9134f2419ff8ee5e5fb1342a6bba861c91ae76053ebe8ff9c5f82d718d391f7ffd5adf4f78f5d1ef9b0ad06de6bc5bc214c5064d2a24b212b4a7212771e477cf08bf2ef001c6ca4a7b5b10f1b2984a0919e4be311932f0d53ed62d1ff1b5a2e74fbac3c61ded0c066a29757dcf7e1c8508c3a8e17c949caf88e1b29f73d8f69b4e6dea73530db26ff675cf0e5bb4dc50514644afb1ac268b4716a4dd55f912809c534ce8fd611a1407424502d4e77d2f8b4b721d0b11d8d4aee0bef8a9062c252acf8d403fd824e187997a3a91679971c63ad64a9ac1e22ffc511994dfc7c4ea90514df68f562c7f9b8274921186ad7191c207015e77f01b47e385a7381a3b834dbd4b4f9db668911212ebe7983d3b5ff6b25861987bccb9a9595b314d872379dcedb4d18eea503cdae8b5f50f3b2ff67333bff5d82bfc6a00e773584fd03068b84c2350e5e785b2b7bd337d8d7a23dedef94c464e0b20ebeec0471fcab3af2498a6e09cb48cba71454c2d64556c0652cdd6e1444fb839a6c0aeb560d1c945677552d8739e33268ea6ec68931beb2c27cb4e70cbc37b03e72e8d8ac1833571f6ba2e35961cd67994b8ce5ef7c1306768bc14c6d24f4eb2c0808e16a2d922d964cfc1039415e71a2152037373ef5841a0faed2a3b5e83abe82b45bda51a720463eacf8e59fd9c694b8b31982e7b61bfe374282bd02798fb0330334eef76ecd2d4453dbb05b4529e258c9bdebe109a69b3ae93649595231b73df841a236cfcbf155b9cede584f8f2e76d972c47da019c901bbb4934dae82a4471842b078d465662f12dc5317c24ddbe5777fc5c26faae97dcb1068caa51a78a4893a082f9e578b513d03aec3f3c6a809c22ebb2da51cf41d30fab1f5b43857f6a73bdbb9e74ec03acad255a3921a8d5b0901b9b1d2d8c5a2d7b9f02985045da36c813da7893ba34e7fa3f71928ec67e423f7f3d59ce3f8ada79604fc80cacb76be6ee50ac6418b6237fdbe3bf5c551deaf60be621f6a7e22777a38028b197a20205a2e74be6f3900ee5607e4911f2a15dfa531959f7c356aa2e7e40052327b162300fee278de15c37c011293242ad0246763622d6f31b5e20b85ac6178c264c054b9487c43cbf93833cd3a46dba04a30c59bfab8b066e854f31e788a66627ef38872b0b0f9eec2ce169b2d88a0667c6c7e6173c8e3ab8e825f92e24a86d4024a2dd1e3576617dfb542700a44312e3b99d347a39c034446e676b32d3670bf613daf754383afdcaac2e87e13909ac8060671f68ccf6cd6b60376ba3fe85368ba9bc24e86b6c4e9544a650cc84ea1e03fd986946a1549b72992d33408d7db27ab43f8a5e49f109f3d831ba1514db827ef204984b43bcb3b7e58c04c32b9cf90315cb9f56ddb0665e1d3400eb41b44e403d8f6a98bdd2780dbfde7eb024fa4df8212ee8bcd74fcaed7e84dfc59a167fb8e07fc127d11e8ef69e70fd936177e4022d915d190f45b058eb1f244d6fae31ae794f79bf84df06ddba81ae78322719a230e9c9feda1e8f695855de8be42410b2b321d0b5a76dcf8261540d39d971860a98f915d68d29600ffe25e0fee3764692cdc0809c2ecfdf152c8fb9bd96c75f85c23eb758e7358049a00b5551b6cb5af264aa063f2e3ad68ee66777bcbc2134f1f2e49327f5134d305d8dfd9d1f2362f4e320b9810e651ae572f6addd76d692a94b9038ec3f87cc50856a681f7fcae73316d62b3d399bc14ac6e8dcda71576102e865c153e9b7a9b66493b25efd4c44ceb4a6e73b740b3cc08b98d4038392fa297606a24410508dacf4b91ef042b3c0cc3b60ae2615a58e55c8f7e42e8da7c33723c76d11d43636451a1e4ce153becd02ed239d433a06ed938063c3a4752145d4b07ef1610a6ad396eb9fe12cc2431abb002b3de357d1e2e51487d31f91084cc214e430bfdd354e2bba2266366b1b1e88510f3037ac8145be30b77fa615709d9398195508606b8f739869625d2b50cb03911bfd63e3eea30699d2f2def71df34a2bebd6124ecd27026f4f195046c389fab8d8fcd0b530cc355556bc21458c638797c13feff770e3163a9af7512188b94b467f0a71ac73cc3bb8f19c3c878bc0fb0d0d2a647737656d784dc916e31dd8c16a08cd8e4ab72309eed036b1e333d8ee8bd88e52a7c3a18167db6558eda195f7c2e04c4499acc227da27faac6df52d750bc6bff7171e986686830cf90a1025b53bbc13b0ce87ed1cd21ee2777e4cc1e3cd8d7a7bf3a1640ac8814f0459c46183631b17af34837892756a5006270f3b3beae9e7143221bf606af34c6e3511c02d41d60c02dd6c2bed9cb8b5c8ae501e4c19ae28407d5dda31de5404ef55471e16e311d8dae8674949f446e2948545f3fcec5b1ad8827358fc5b785dd60208cfa76bfca07d7f1d5088577d88f3c1cccd22f4cdae8af9163fcb5b3554a0988c1f3147185d6ebed78510a5f4588d18800d7b8afed7f1a72cbd6c460e425307e27e24a6144d599f4ec54cd4ef0a8638170ecaa6fd2fc3a297e78096eb6d56d44628bb0e45599db8c2a9137815b9db2e7f4be187facc8bcb65fc489143477a765428444b3704f893d9685f4e635d7d506b120e1afd10fc68773e52af857cdfc3c31b7589b4c8ef863061efa39c84d29753eed88906602700c12f6c4c945a92bae8dc779c980ffcbac17687584f21da16f848e4f4afe8e03814b1450be89908867c520b70b7f262466af15a94a1f97a119a1ccf95d572e344bbfe34e9d673a4d79f00f3272a3e71a965596c842f97efdf4ecae48b9cbb7eb3ce490aaabeb3f40fdf551e3124055b0c3fd46f82dbdc6a10351fb74a9d20beda4d4a1d79075183dee4849f978762bbe04b33563e38ec3a70fb2ca90f7c269c27c650359bee3f5049c112c6a3a3cee5f46fcd3dd6530db2e238cebf7d4e34510d9cd8e3ae6f66da64e8cb9161926b78fe97a0b5392d7fcf05374f3552769b7b30f846e1ad1879419b292d7c17e88c5ab48b802c22e63660139bb1a64e180770b327b1c8cb09f572742c4bb0b8d54af9d3c3e80a944641c787e75de73d5c90271b5327fd0a64482bea3bae84a10760b66826308364ee5f1855485f2099eb32e603ab75b9dce3a5533f721e80eaac84a666bc4e749f39dd9bb413dbebdd0e3e709369c6c45fd19dcd00a07b0cba979e98eadfbce5c3608662442d2b6fcd596482b9e670b2c487cb31b12f4c02c92277092523973e635b9cd7c9d1e071fab15fe52e", 0x1000}, {&(0x7f0000001700)="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", 0x304}, {&(0x7f00000011c0)="68e29997fc4ac882b104c92ea778e009e1cd23db70bee9d562dab816659a195560b63ca62e4ba7864bd3856895299b08f9cb9783908a7783ed0bf8310af01e1381acb3c6498570bca378d6ad9c24c7cd5c680dde97399b26bfbcabedaa410453", 0x60}, {&(0x7f0000001240)="cccdffe1d73b05bcc523588015d7007476cac5089b3823094a88a4ccbd668bee3d0d242e33612fad750382f9666618f1df7335152a98ad3907d0a3bd044f9604db5eb9b4b2f898974073b125862a8adc64df11faddf3f4645ed812421fb0b6f283de2d6b72703bf6011a2ae00a1008e7736b6f9777482ca09dbfd9e36a25421f4475fad40e1ffac35b0b40ea99445f490cbd51706517fd60adff8545a7cdabc6ef6ce57e1fbabd851c47655f8edaa97dc2c57961b00e0bb855afd39ac63f42e0bf8c160c01dcd28ee0c82e66224bd22b69f2df037dd144a74851a0bd", 0xdc}, {&(0x7f0000001340)="537fe178c8d41314264c5907fb835cad96ef74cd26771c59e1fddd2089b52d74be553db7d38658a5bf5663631de8f911414eea4dea8d5ce26b781398f7b9f272b58851b5a316d9a9b672104c039e5b338b8fb81adfc6d2fa198d31e8455aecc85c1f0be3026e8f1b661f77836844cf814734276083d62901bebbd7b11581220154ae45510bac3dd8239ca667e1df2f9ff9322676d31c6d17f56e50c3dd04ec1126fe577103e8a41128d4d7e84c0f5ecb8121ae8bd2afcc122256088918f197c4ba", 0xc1}], 0x7, &(0x7f00000014c0)=[{0xd8, 0x103, 0x9, "28545d4b4b622f1deff5877a616336162d8b0227b699f4a85d3cfe5461c6ec2a034aea1c174d02b5b69c05ea1cf20ceb076fc4eb78c58a88dee7a37754cbee99a301dd03ab8b9709293615aafecf686365f545933a3c50d77ce5888875be296a8351502e13278d356111bc25f17cb97e9f36b8709a92d43561e14b01a2afa0f0848af64512c9389021d2dbc1632f5f854a0ff9d51429d6823fa9a7b6b2f9b6a2c3faa7f458a609c22a3a0911617cd72647ab4e15330938bfdce5c6e21357c7ec82"}, {0x88, 0x11, 0x8, "25476b1edc065755a9344b1b8cf8f14a29441cddf199336c9c9c96de18f97895ed9ca562a6dfdb623ecb47635295072e0f427b732999cd6af1d69e4d887c2ef406f9771bd73c78b6d4a058e6f7a2a5416d461e14ff6d964d113dd5fddabd2d4431126d228e5f17eb5b21af7af8102b068b51"}, {0x50, 0x110, 0x9, "94a3fc9a73bb456af14ae829ab52c7ae535d105e5e420ce3b80a0d9bed5ee3353a375c108568ac6411dd4420286907eff28453579f0550cba0aa4f9d10a57a"}, {0x20, 0x108, 0x8, "d7bedb9d4ca5481f34c9"}], 0x1d0, 0x88}, 0x38) r2 = getgid() getgroups(0x1, &(0x7f0000001100)=[r2]) 02:29:18 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) (async) sendmsg$qrtr(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:18 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) recvmsg$qrtr(r0, &(0x7f0000001500)={&(0x7f0000000000), 0xc, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/213, 0xd5}, {&(0x7f0000001140)=""/132, 0x84}, {&(0x7f0000001200)}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/163, 0xa3}, {&(0x7f0000001380)=""/33, 0x21}], 0x7, &(0x7f0000001440)=[{0xa0, 0x0, 0x0, ""/142}], 0xa0, 0x40002000}, 0x38, 0x40012000) socket$qrtr(0x2a, 0x2, 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) (async) recvmsg$qrtr(r0, &(0x7f0000001500)={&(0x7f0000000000), 0xc, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/213, 0xd5}, {&(0x7f0000001140)=""/132, 0x84}, {&(0x7f0000001200)}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/163, 0xa3}, {&(0x7f0000001380)=""/33, 0x21}], 0x7, &(0x7f0000001440)=[{0xa0, 0x0, 0x0, ""/142}], 0xa0, 0x40002000}, 0x38, 0x40012000) (async) 02:29:18 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) syz_io_uring_setup(0x7854, &(0x7f0000000000)={0x0, 0xf108, 0x2, 0x3, 0x349}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8a000, 0x40) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000140)='./file0\x00', 0x8, 0x438400, 0x12345}, 0x6) 02:29:18 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x109401, 0x0) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4, 0x2}, 0xfffffd86) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) 02:29:18 executing program 2: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000080)) (async) socket$qrtr(0x2a, 0x2, 0x0) r0 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) (async) socketpair(0x26, 0x800, 0xf4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x2, &(0x7f0000000000)) 02:29:18 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x109401, 0x0) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4, 0x2}, 0xfffffd86) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) 02:29:18 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) syz_io_uring_setup(0x7854, &(0x7f0000000000)={0x0, 0xf108, 0x2, 0x3, 0x349}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8a000, 0x40) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000140)='./file0\x00', 0x8, 0x438400, 0x12345}, 0x6) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) syz_io_uring_setup(0x7854, &(0x7f0000000000)={0x0, 0xf108, 0x2, 0x3, 0x349}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8a000, 0x40) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000140)='./file0\x00', 0x8, 0x438400, 0x12345}, 0x6) (async) 02:29:18 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'syzkaller0\x00'}) 02:29:18 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair(0x6, 0x6, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xc}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040011}, 0x800) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20008080) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x20000080) socketpair(0x2b, 0x800, 0x9, &(0x7f0000000540)={0xffffffffffffffff}) r5 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_DEBUG={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x24}}, 0x40005) 02:29:18 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x109401, 0x0) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4, 0x2}, 0xfffffd86) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) 02:29:18 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5421, &(0x7f0000000040)) getgroups(0x1, &(0x7f0000000180)=[0x0]) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) sendmsg$qrtr(r1, &(0x7f00000016c0)={&(0x7f0000000000)={0x2a, 0x3, 0x7ffe}, 0xc, &(0x7f0000001440)=[{&(0x7f0000000080)="8c4340d5fc217abbd7c6d4c2efbeed28c91a80951cc50b2025970382f9e13b7871588d46e84df9d35a2754f17ebbe9c92098170a515b66cf10c04c380a", 0x3d}, {&(0x7f00000000c0)="9b076f59bb037a8a2a680c147ac38bb637bc375a7565b933381f80527beb988ed27eb142892c", 0x26}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001700)="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", 0x304}, {&(0x7f00000011c0)="68e29997fc4ac882b104c92ea778e009e1cd23db70bee9d562dab816659a195560b63ca62e4ba7864bd3856895299b08f9cb9783908a7783ed0bf8310af01e1381acb3c6498570bca378d6ad9c24c7cd5c680dde97399b26bfbcabedaa410453", 0x60}, {&(0x7f0000001240)="cccdffe1d73b05bcc523588015d7007476cac5089b3823094a88a4ccbd668bee3d0d242e33612fad750382f9666618f1df7335152a98ad3907d0a3bd044f9604db5eb9b4b2f898974073b125862a8adc64df11faddf3f4645ed812421fb0b6f283de2d6b72703bf6011a2ae00a1008e7736b6f9777482ca09dbfd9e36a25421f4475fad40e1ffac35b0b40ea99445f490cbd51706517fd60adff8545a7cdabc6ef6ce57e1fbabd851c47655f8edaa97dc2c57961b00e0bb855afd39ac63f42e0bf8c160c01dcd28ee0c82e66224bd22b69f2df037dd144a74851a0bd", 0xdc}, {&(0x7f0000001340)="537fe178c8d41314264c5907fb835cad96ef74cd26771c59e1fddd2089b52d74be553db7d38658a5bf5663631de8f911414eea4dea8d5ce26b781398f7b9f272b58851b5a316d9a9b672104c039e5b338b8fb81adfc6d2fa198d31e8455aecc85c1f0be3026e8f1b661f77836844cf814734276083d62901bebbd7b11581220154ae45510bac3dd8239ca667e1df2f9ff9322676d31c6d17f56e50c3dd04ec1126fe577103e8a41128d4d7e84c0f5ecb8121ae8bd2afcc122256088918f197c4ba", 0xc1}], 0x7, &(0x7f00000014c0)=[{0xd8, 0x103, 0x9, "28545d4b4b622f1deff5877a616336162d8b0227b699f4a85d3cfe5461c6ec2a034aea1c174d02b5b69c05ea1cf20ceb076fc4eb78c58a88dee7a37754cbee99a301dd03ab8b9709293615aafecf686365f545933a3c50d77ce5888875be296a8351502e13278d356111bc25f17cb97e9f36b8709a92d43561e14b01a2afa0f0848af64512c9389021d2dbc1632f5f854a0ff9d51429d6823fa9a7b6b2f9b6a2c3faa7f458a609c22a3a0911617cd72647ab4e15330938bfdce5c6e21357c7ec82"}, {0x88, 0x11, 0x8, "25476b1edc065755a9344b1b8cf8f14a29441cddf199336c9c9c96de18f97895ed9ca562a6dfdb623ecb47635295072e0f427b732999cd6af1d69e4d887c2ef406f9771bd73c78b6d4a058e6f7a2a5416d461e14ff6d964d113dd5fddabd2d4431126d228e5f17eb5b21af7af8102b068b51"}, {0x50, 0x110, 0x9, "94a3fc9a73bb456af14ae829ab52c7ae535d105e5e420ce3b80a0d9bed5ee3353a375c108568ac6411dd4420286907eff28453579f0550cba0aa4f9d10a57a"}, {0x20, 0x108, 0x8, "d7bedb9d4ca5481f34c9"}], 0x1d0, 0x88}, 0x38) r2 = getgid() getgroups(0x1, &(0x7f0000001100)=[r2]) socket$qrtr(0x2a, 0x2, 0x0) (async) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5421, &(0x7f0000000040)) (async) getgroups(0x1, &(0x7f0000000180)=[0x0]) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) sendmsg$qrtr(r1, &(0x7f00000016c0)={&(0x7f0000000000)={0x2a, 0x3, 0x7ffe}, 0xc, &(0x7f0000001440)=[{&(0x7f0000000080)="8c4340d5fc217abbd7c6d4c2efbeed28c91a80951cc50b2025970382f9e13b7871588d46e84df9d35a2754f17ebbe9c92098170a515b66cf10c04c380a", 0x3d}, {&(0x7f00000000c0)="9b076f59bb037a8a2a680c147ac38bb637bc375a7565b933381f80527beb988ed27eb142892c", 0x26}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001700)="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", 0x304}, {&(0x7f00000011c0)="68e29997fc4ac882b104c92ea778e009e1cd23db70bee9d562dab816659a195560b63ca62e4ba7864bd3856895299b08f9cb9783908a7783ed0bf8310af01e1381acb3c6498570bca378d6ad9c24c7cd5c680dde97399b26bfbcabedaa410453", 0x60}, {&(0x7f0000001240)="cccdffe1d73b05bcc523588015d7007476cac5089b3823094a88a4ccbd668bee3d0d242e33612fad750382f9666618f1df7335152a98ad3907d0a3bd044f9604db5eb9b4b2f898974073b125862a8adc64df11faddf3f4645ed812421fb0b6f283de2d6b72703bf6011a2ae00a1008e7736b6f9777482ca09dbfd9e36a25421f4475fad40e1ffac35b0b40ea99445f490cbd51706517fd60adff8545a7cdabc6ef6ce57e1fbabd851c47655f8edaa97dc2c57961b00e0bb855afd39ac63f42e0bf8c160c01dcd28ee0c82e66224bd22b69f2df037dd144a74851a0bd", 0xdc}, {&(0x7f0000001340)="537fe178c8d41314264c5907fb835cad96ef74cd26771c59e1fddd2089b52d74be553db7d38658a5bf5663631de8f911414eea4dea8d5ce26b781398f7b9f272b58851b5a316d9a9b672104c039e5b338b8fb81adfc6d2fa198d31e8455aecc85c1f0be3026e8f1b661f77836844cf814734276083d62901bebbd7b11581220154ae45510bac3dd8239ca667e1df2f9ff9322676d31c6d17f56e50c3dd04ec1126fe577103e8a41128d4d7e84c0f5ecb8121ae8bd2afcc122256088918f197c4ba", 0xc1}], 0x7, &(0x7f00000014c0)=[{0xd8, 0x103, 0x9, "28545d4b4b622f1deff5877a616336162d8b0227b699f4a85d3cfe5461c6ec2a034aea1c174d02b5b69c05ea1cf20ceb076fc4eb78c58a88dee7a37754cbee99a301dd03ab8b9709293615aafecf686365f545933a3c50d77ce5888875be296a8351502e13278d356111bc25f17cb97e9f36b8709a92d43561e14b01a2afa0f0848af64512c9389021d2dbc1632f5f854a0ff9d51429d6823fa9a7b6b2f9b6a2c3faa7f458a609c22a3a0911617cd72647ab4e15330938bfdce5c6e21357c7ec82"}, {0x88, 0x11, 0x8, "25476b1edc065755a9344b1b8cf8f14a29441cddf199336c9c9c96de18f97895ed9ca562a6dfdb623ecb47635295072e0f427b732999cd6af1d69e4d887c2ef406f9771bd73c78b6d4a058e6f7a2a5416d461e14ff6d964d113dd5fddabd2d4431126d228e5f17eb5b21af7af8102b068b51"}, {0x50, 0x110, 0x9, "94a3fc9a73bb456af14ae829ab52c7ae535d105e5e420ce3b80a0d9bed5ee3353a375c108568ac6411dd4420286907eff28453579f0550cba0aa4f9d10a57a"}, {0x20, 0x108, 0x8, "d7bedb9d4ca5481f34c9"}], 0x1d0, 0x88}, 0x38) (async) getgid() (async) getgroups(0x1, &(0x7f0000001100)=[r2]) (async) 02:29:18 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'syzkaller0\x00'}) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'syzkaller0\x00'}) (async) 02:29:18 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xd8, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7f}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x4}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r2) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r3) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r4, 0x510, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x480) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 02:29:18 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x109401, 0x0) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4, 0x2}, 0xfffffd86) 02:29:18 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair(0x6, 0x6, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xc}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040011}, 0x800) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20008080) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x20000080) socketpair(0x2b, 0x800, 0x9, &(0x7f0000000540)={0xffffffffffffffff}) r5 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_DEBUG={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x24}}, 0x40005) socket$qrtr(0x2a, 0x2, 0x0) (async) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socketpair(0x6, 0x6, 0x80000000, &(0x7f0000000140)) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xc}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040011}, 0x800) (async) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20008080) (async) syz_io_uring_complete(0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x20000080) (async) socketpair(0x2b, 0x800, 0x9, &(0x7f0000000540)) (async) syz_io_uring_complete(0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_DEBUG={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x24}}, 0x40005) (async) 02:29:18 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) syz_io_uring_setup(0x7854, &(0x7f0000000000)={0x0, 0xf108, 0x2, 0x3, 0x349}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8a000, 0x40) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000140)='./file0\x00', 0x8, 0x438400, 0x12345}, 0x6) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) syz_io_uring_setup(0x7854, &(0x7f0000000000)={0x0, 0xf108, 0x2, 0x3, 0x349}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8a000, 0x40) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000140)='./file0\x00', 0x8, 0x438400, 0x12345}, 0x6) (async) 02:29:18 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'syzkaller0\x00'}) 02:29:18 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4, 0x2}, 0xfffffd86) 02:29:18 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5421, &(0x7f0000000040)) (async) getgroups(0x1, &(0x7f0000000180)=[0x0]) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) sendmsg$qrtr(r1, &(0x7f00000016c0)={&(0x7f0000000000)={0x2a, 0x3, 0x7ffe}, 0xc, &(0x7f0000001440)=[{&(0x7f0000000080)="8c4340d5fc217abbd7c6d4c2efbeed28c91a80951cc50b2025970382f9e13b7871588d46e84df9d35a2754f17ebbe9c92098170a515b66cf10c04c380a", 0x3d}, {&(0x7f00000000c0)="9b076f59bb037a8a2a680c147ac38bb637bc375a7565b933381f80527beb988ed27eb142892c", 0x26}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001700)="ce9c0fee4240a397a5b0faa6b9774fa8b223e2001d16e30693512dc8fb333a29732bf3a53e026915d7dabd722893ac7ed806fd7f5b72635590398413a5bb03e7c37c8187b2845bf5499fcf3acaf5441bd0b79eb159a9f3d47a47ac2ef29b0c17188f3c0ba73b57c0eba8b5bf325c3b29dd84e524f2bf0ed3ab8461155fd00b794ddcc1b71caf2ca91f1f552301842b2c6268ea906c747e64d181febd07b0b6fde7a1475eda7a0b10ba5e371ec8d31664c6ed86ba34f84410807bf7ad9520361b7c2e65a8bee037a4160c79fcfc7c36da2bb7fdfe8f7ce0dabd1ded96ce405e3968cc051f29471caf3243cf216eebd8172eaec2ea2ee30fd33599714dfe06000000b84e54476583455a57441356df9a36b54efed1b1a67a548fddee433debe99a2834d2d0009a44f72315040cec96209114cc295b468a465b9c10a3b53cac484e29b4c146758bce0f0a6fa401444b9be1899cfe483b88b39680282a46d5df050cda0e765f42a67415b7186fda26ef8c1e7f7f6890f935ec8fdbb56355e4c682bbf31e0431c118b1777439abf3121dd864a91c4300a6333568af630c39608e74240f81e82efc0407eff995cb3753f776ed49018a1bfc9544547c31910ba78699c8471d6358c95b8f75ccc1bef7b95b25d61b5ab796da6810b46e550565c00e5f0b540621696b02cad7781d154e93e732800f0932c8bbed95bbd71ce676d26e2aa109573f537577a4535c811f5d444646928fc7623748de46c27b36cd9466f749479416f9f284cd1f9f29b5e28c8668d82eaa8773963e9ed95787f6306154a6893a9040d3b7e8df2ef381b9a0803ff1cff52e8d94a0cd7da1bdb53f1948759fb7e1305aa8aa42f6971486688559fd1d061502b08cf7f198f4009a7cac2e21c17c19db4c3fa0ddd9c3df0ea8ab75d518047c6373cefc698281d59951f553139c052cc86853974645f48434a3687d66a862d987334dcfa79a4932dcddcd00a08aeb611c05ae6d4e2c5fea957ccb5bf295667ac67660991a81cfe961eff62c83de70253eaa64a565e86e0cbf5cac6e623d91c96769e783c1ac1f9e096c3006676eb289d336010b", 0x304}, {&(0x7f00000011c0)="68e29997fc4ac882b104c92ea778e009e1cd23db70bee9d562dab816659a195560b63ca62e4ba7864bd3856895299b08f9cb9783908a7783ed0bf8310af01e1381acb3c6498570bca378d6ad9c24c7cd5c680dde97399b26bfbcabedaa410453", 0x60}, {&(0x7f0000001240)="cccdffe1d73b05bcc523588015d7007476cac5089b3823094a88a4ccbd668bee3d0d242e33612fad750382f9666618f1df7335152a98ad3907d0a3bd044f9604db5eb9b4b2f898974073b125862a8adc64df11faddf3f4645ed812421fb0b6f283de2d6b72703bf6011a2ae00a1008e7736b6f9777482ca09dbfd9e36a25421f4475fad40e1ffac35b0b40ea99445f490cbd51706517fd60adff8545a7cdabc6ef6ce57e1fbabd851c47655f8edaa97dc2c57961b00e0bb855afd39ac63f42e0bf8c160c01dcd28ee0c82e66224bd22b69f2df037dd144a74851a0bd", 0xdc}, {&(0x7f0000001340)="537fe178c8d41314264c5907fb835cad96ef74cd26771c59e1fddd2089b52d74be553db7d38658a5bf5663631de8f911414eea4dea8d5ce26b781398f7b9f272b58851b5a316d9a9b672104c039e5b338b8fb81adfc6d2fa198d31e8455aecc85c1f0be3026e8f1b661f77836844cf814734276083d62901bebbd7b11581220154ae45510bac3dd8239ca667e1df2f9ff9322676d31c6d17f56e50c3dd04ec1126fe577103e8a41128d4d7e84c0f5ecb8121ae8bd2afcc122256088918f197c4ba", 0xc1}], 0x7, &(0x7f00000014c0)=[{0xd8, 0x103, 0x9, "28545d4b4b622f1deff5877a616336162d8b0227b699f4a85d3cfe5461c6ec2a034aea1c174d02b5b69c05ea1cf20ceb076fc4eb78c58a88dee7a37754cbee99a301dd03ab8b9709293615aafecf686365f545933a3c50d77ce5888875be296a8351502e13278d356111bc25f17cb97e9f36b8709a92d43561e14b01a2afa0f0848af64512c9389021d2dbc1632f5f854a0ff9d51429d6823fa9a7b6b2f9b6a2c3faa7f458a609c22a3a0911617cd72647ab4e15330938bfdce5c6e21357c7ec82"}, {0x88, 0x11, 0x8, "25476b1edc065755a9344b1b8cf8f14a29441cddf199336c9c9c96de18f97895ed9ca562a6dfdb623ecb47635295072e0f427b732999cd6af1d69e4d887c2ef406f9771bd73c78b6d4a058e6f7a2a5416d461e14ff6d964d113dd5fddabd2d4431126d228e5f17eb5b21af7af8102b068b51"}, {0x50, 0x110, 0x9, "94a3fc9a73bb456af14ae829ab52c7ae535d105e5e420ce3b80a0d9bed5ee3353a375c108568ac6411dd4420286907eff28453579f0550cba0aa4f9d10a57a"}, {0x20, 0x108, 0x8, "d7bedb9d4ca5481f34c9"}], 0x1d0, 0x88}, 0x38) (async) r2 = getgid() getgroups(0x1, &(0x7f0000001100)=[r2]) 02:29:18 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xd8, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7f}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x4}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r2) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14}, 0x14}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r3) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r4, 0x510, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x480) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 02:29:18 executing program 3: connect$qrtr(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x4, 0x2}, 0xfffffd86) 02:29:18 executing program 5: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0, 0x41}, {0x0, 0x26}, {0x0}, {0x0}, {0x0, 0xfdfb}, {0x0}], 0x9}, 0x38) 02:29:18 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xcd4be870556d3ec5, &(0x7f0000000000)={@empty, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000080)={'sit0\x00', r1, 0x8000, 0x8000, 0xfffffff8, 0x5, {{0x30, 0x4, 0x0, 0x26, 0xc0, 0x68, 0x0, 0x3, 0x4, 0x0, @empty, @multicast2, {[@generic={0x94, 0xe, "26890767ef5859e8e8d71761"}, @lsrr={0x83, 0x17, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010102, @remote, @rand_addr=0x64010102]}, @rr={0x7, 0xb, 0x57, [@loopback, @loopback]}, @cipso={0x86, 0x14, 0x2, [{0x2, 0x6, "e7524da2"}, {0x5, 0x8, "7836dac593d9"}]}, @timestamp_addr={0x44, 0x1c, 0x88, 0x1, 0x8, [{@broadcast, 0x2}, {@multicast1, 0x1ff}, {@private=0xa010101, 0x80000001}]}, @timestamp_prespec={0x44, 0x14, 0xe9, 0x3, 0xf, [{@multicast1, 0x1}, {@multicast2, 0xa2bf}]}, @timestamp_prespec={0x44, 0x24, 0x18, 0x3, 0x1, [{@private=0xa010102, 0x7}, {@loopback, 0x9}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x8}]}, @end, @generic={0x44, 0x12, "d1f618cdd61d10431f8ee4b6bb92aa85"}]}}}}}) 02:29:18 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xd8, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7f}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x4}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r2) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r3) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r4, 0x510, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x480) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xd8, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7f}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x4}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) (async) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r2) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r3) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r4, 0x510, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x480) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) 02:29:18 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socketpair(0x6, 0x6, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xc}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040011}, 0x800) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20008080) (async) r2 = syz_io_uring_complete(0x0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x20000080) socketpair(0x2b, 0x800, 0x9, &(0x7f0000000540)={0xffffffffffffffff}) r5 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_DEBUG={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x24}}, 0x40005) 02:29:18 executing program 0: bind$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0x7ffe}, 0xc) r0 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)=[{&(0x7f0000000080)=""/131, 0x83}, {&(0x7f0000000140)=""/14, 0xe}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x40010000) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5421, &(0x7f0000000000)) 02:29:18 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT=r2], 0x64}, 0x1, 0x0, 0x0, 0x20800}, 0x80) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) 02:29:18 executing program 3: connect$qrtr(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x4, 0x2}, 0xfffffd86) 02:29:18 executing program 0: bind$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0x7ffe}, 0xc) (async) r0 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)=[{&(0x7f0000000080)=""/131, 0x83}, {&(0x7f0000000140)=""/14, 0xe}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x40010000) (async) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5421, &(0x7f0000000000)) 02:29:18 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xcd4be870556d3ec5, &(0x7f0000000000)={@empty, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000080)={'sit0\x00', r1, 0x8000, 0x8000, 0xfffffff8, 0x5, {{0x30, 0x4, 0x0, 0x26, 0xc0, 0x68, 0x0, 0x3, 0x4, 0x0, @empty, @multicast2, {[@generic={0x94, 0xe, "26890767ef5859e8e8d71761"}, @lsrr={0x83, 0x17, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010102, @remote, @rand_addr=0x64010102]}, @rr={0x7, 0xb, 0x57, [@loopback, @loopback]}, @cipso={0x86, 0x14, 0x2, [{0x2, 0x6, "e7524da2"}, {0x5, 0x8, "7836dac593d9"}]}, @timestamp_addr={0x44, 0x1c, 0x88, 0x1, 0x8, [{@broadcast, 0x2}, {@multicast1, 0x1ff}, {@private=0xa010101, 0x80000001}]}, @timestamp_prespec={0x44, 0x14, 0xe9, 0x3, 0xf, [{@multicast1, 0x1}, {@multicast2, 0xa2bf}]}, @timestamp_prespec={0x44, 0x24, 0x18, 0x3, 0x1, [{@private=0xa010102, 0x7}, {@loopback, 0x9}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x8}]}, @end, @generic={0x44, 0x12, "d1f618cdd61d10431f8ee4b6bb92aa85"}]}}}}}) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xcd4be870556d3ec5, &(0x7f0000000000)={@empty}, &(0x7f0000000040)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000080)={'sit0\x00', r1, 0x8000, 0x8000, 0xfffffff8, 0x5, {{0x30, 0x4, 0x0, 0x26, 0xc0, 0x68, 0x0, 0x3, 0x4, 0x0, @empty, @multicast2, {[@generic={0x94, 0xe, "26890767ef5859e8e8d71761"}, @lsrr={0x83, 0x17, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010102, @remote, @rand_addr=0x64010102]}, @rr={0x7, 0xb, 0x57, [@loopback, @loopback]}, @cipso={0x86, 0x14, 0x2, [{0x2, 0x6, "e7524da2"}, {0x5, 0x8, "7836dac593d9"}]}, @timestamp_addr={0x44, 0x1c, 0x88, 0x1, 0x8, [{@broadcast, 0x2}, {@multicast1, 0x1ff}, {@private=0xa010101, 0x80000001}]}, @timestamp_prespec={0x44, 0x14, 0xe9, 0x3, 0xf, [{@multicast1, 0x1}, {@multicast2, 0xa2bf}]}, @timestamp_prespec={0x44, 0x24, 0x18, 0x3, 0x1, [{@private=0xa010102, 0x7}, {@loopback, 0x9}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x8}]}, @end, @generic={0x44, 0x12, "d1f618cdd61d10431f8ee4b6bb92aa85"}]}}}}}) (async) 02:29:18 executing program 5: socket$qrtr(0x2a, 0x2, 0x0) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0, 0x41}, {0x0, 0x26}, {0x0}, {0x0}, {0x0, 0xfdfb}, {0x0}], 0x9}, 0x38) 02:29:18 executing program 3: connect$qrtr(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x4, 0x2}, 0xfffffd86) 02:29:18 executing program 4: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x0, 0x5, 0x6, &(0x7f0000000000)) socketpair(0x11, 0x800, 0x3, &(0x7f0000000040)) socket$qrtr(0x2a, 0x2, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x8000, 0x620080) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) 02:29:18 executing program 0: bind$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0x7ffe}, 0xc) (async) r0 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)=[{&(0x7f0000000080)=""/131, 0x83}, {&(0x7f0000000140)=""/14, 0xe}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x40010000) (async) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5421, &(0x7f0000000000)) 02:29:18 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async, rerun: 64) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xcd4be870556d3ec5, &(0x7f0000000000)={@empty, 0x0}, &(0x7f0000000040)=0x14) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000080)={'sit0\x00', r1, 0x8000, 0x8000, 0xfffffff8, 0x5, {{0x30, 0x4, 0x0, 0x26, 0xc0, 0x68, 0x0, 0x3, 0x4, 0x0, @empty, @multicast2, {[@generic={0x94, 0xe, "26890767ef5859e8e8d71761"}, @lsrr={0x83, 0x17, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010102, @remote, @rand_addr=0x64010102]}, @rr={0x7, 0xb, 0x57, [@loopback, @loopback]}, @cipso={0x86, 0x14, 0x2, [{0x2, 0x6, "e7524da2"}, {0x5, 0x8, "7836dac593d9"}]}, @timestamp_addr={0x44, 0x1c, 0x88, 0x1, 0x8, [{@broadcast, 0x2}, {@multicast1, 0x1ff}, {@private=0xa010101, 0x80000001}]}, @timestamp_prespec={0x44, 0x14, 0xe9, 0x3, 0xf, [{@multicast1, 0x1}, {@multicast2, 0xa2bf}]}, @timestamp_prespec={0x44, 0x24, 0x18, 0x3, 0x1, [{@private=0xa010102, 0x7}, {@loopback, 0x9}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x8}]}, @end, @generic={0x44, 0x12, "d1f618cdd61d10431f8ee4b6bb92aa85"}]}}}}}) 02:29:18 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT=r2], 0x64}, 0x1, 0x0, 0x0, 0x20800}, 0x80) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) socket$qrtr(0x2a, 0x2, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT=r2], 0x64}, 0x1, 0x0, 0x0, 0x20800}, 0x80) (async) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) (async) 02:29:18 executing program 3: socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x4, 0x2}, 0xfffffd86) 02:29:18 executing program 5: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0, 0x41}, {0x0, 0x26}, {0x0}, {0x0}, {0x0, 0xfdfb}, {0x0}], 0x9}, 0x38) socket$qrtr(0x2a, 0x2, 0x0) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0, 0x41}, {0x0, 0x26}, {0x0}, {0x0}, {0x0, 0xfdfb}, {0x0}], 0x9}, 0x38) (async) 02:29:18 executing program 0: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x21, 0xa, 0x5, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5421, &(0x7f0000000080)) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10) 02:29:18 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0xffffffffffffffe3, 0x8001}, 0x38) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$qrtr(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x2a, 0x4, 0x2}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000180)="3916e4d09d0476261fc53538340d599307acd40a9de0ac43fda2e7b27e653505528a15cf195310a67338e5efe77de200a77da2fd9e270f0b6eb841c3d8065eecf465edfcba0d9a532f2594298d1381deae6b44c87b6530944d1f9c", 0x5b}, {&(0x7f0000000200)="8b90516202acc1c8af0d555276047f88a94b3a8dd24fe54a0a9c6e743569fd98d6175fa63f0bc264b0b6c9a5e2ee2a69c6fadd32c18ad587aea20f788a356ba8e7aaca99ba82381d5f32379db64bb9113ca6246aa5b4506ba70463d4272910aa54ddc716989747e950db153b3c4be4d9734b2f5d88f0e486667be6ac29ed01064127449ce193d8f7362e209dfe8cf3", 0x8f}], 0x2, &(0x7f0000000680)=[{0x68, 0x3a, 0x3, "7af18d9f13d6bca69a08817cfd8ac7ef66a1457fc22ae61d9179f5c1d400fe80b44d214056482684e706da90c47d5b168b0e94c1c48870bf27ab0004da4a7d1e40f4cc85ae62e569c68a60c4f97f324e41adcb8257a24f91"}, {0x110, 0xff, 0x7ff80, "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"}, {0xa0, 0x108, 0x400, "2c4ea0b4105b94a9e6cb00de6d21d719bda348ef1e3863583577f36a87bda615fc9d4a703c08ec4bafd9b59fe8cdd6368f2aa290db00c9d29627a62fe3df154fd197c31cfba3878c40c5af57c77f4e3a05fb40461a4016c3801083735ccf59535b048235d1af427629e2011404677a9c9b8f79461d410ce9b76c934136bec9cd70d59b4b2ec38a306a4f9f7fea002bf3"}], 0x218, 0xc840}, 0x38) 02:29:18 executing program 4: socket$qrtr(0x2a, 0x2, 0x0) (async) socketpair(0x0, 0x5, 0x6, &(0x7f0000000000)) (async) socketpair(0x11, 0x800, 0x3, &(0x7f0000000040)) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x8000, 0x620080) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) 02:29:18 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT=r2], 0x64}, 0x1, 0x0, 0x0, 0x20800}, 0x80) (async) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) 02:29:18 executing program 3: socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x4, 0x2}, 0xfffffd86) 02:29:18 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x3, 0x2}, 0xc) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10040200}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="a8010000150a010200000000000000000a00000708000340000000070900010073797a30000000000900020073797a3000000000700008007819194eb2746f2a2b11d96234a148fc3d05de28c052fdf7aca6487bb50b59d1797750ef784bf557ffc950e418f30995c14316b61104fcfb4c207f39e86bf84269dacdd5e6d74d794a6c16040a4dc9bcc2f66b6f747db630185d823c38f5a8ccbbd8ce8c6a548e1ceca6b27108000340000000050900020073797a3000000000090002f9ffffff3200000000e3000800dda967936fe6fdb6ca74d1ad159bbde3bf96b49c236791e4ba4ec58bed8d91a53482df08877f1c9c58e902ca6f41be3ba9aec22e12c13c34f2ada2c5c8c1ff5dc6dada1c25526c5796a2b64c95f9305f37fa9620094164b7c824fbbdd1fe7499c96e6aa2396af9850bf585358ff0b0b38b6ef1dcf88650e9e3e855a6c6204ad8032ea9ada33bde1f745e22301b6a9553dc70765725410647d470c2f3ef7166aec763e5980468568f5e9c4fe34d26f65582add75464ead0b7fa1284327390717c1815f9f97f22cf98f46d61fe997f56f04280e850a448c490b76c74debb74bf003dfc8980d89c9762f81378f68ba28179679edbfefc4bec51a93211fc3be1d2e5"], 0x1a8}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'batadv0\x00'}) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) 02:29:18 executing program 4: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x0, 0x5, 0x6, &(0x7f0000000000)) (async) socketpair(0x11, 0x800, 0x3, &(0x7f0000000040)) (async, rerun: 32) socket$qrtr(0x2a, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x8000, 0x620080) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) 02:29:18 executing program 0: socket$qrtr(0x2a, 0x2, 0x0) (async) socketpair(0x21, 0xa, 0x5, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5421, &(0x7f0000000080)) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10) 02:29:18 executing program 3: socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x4, 0x2}, 0xfffffd86) 02:29:18 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1, 0x7ffe}, 0xc) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x15, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x63, 0x8, "9c0284ea6098f2beacd56affd2007df0605408b2a897d45a635dcccc9394cb0cbd3f99910f19300f70bbed4eadeef03898c10bb3b181e34b098631d75423392531376c1741eda5e641e47fc46432f586a3c0b47db54e94043d5043c827dfc0"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x60000000) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:18 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0xffffffffffffffe3, 0x8001}, 0x38) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) (async) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$qrtr(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x2a, 0x4, 0x2}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000180)="3916e4d09d0476261fc53538340d599307acd40a9de0ac43fda2e7b27e653505528a15cf195310a67338e5efe77de200a77da2fd9e270f0b6eb841c3d8065eecf465edfcba0d9a532f2594298d1381deae6b44c87b6530944d1f9c", 0x5b}, {&(0x7f0000000200)="8b90516202acc1c8af0d555276047f88a94b3a8dd24fe54a0a9c6e743569fd98d6175fa63f0bc264b0b6c9a5e2ee2a69c6fadd32c18ad587aea20f788a356ba8e7aaca99ba82381d5f32379db64bb9113ca6246aa5b4506ba70463d4272910aa54ddc716989747e950db153b3c4be4d9734b2f5d88f0e486667be6ac29ed01064127449ce193d8f7362e209dfe8cf3", 0x8f}], 0x2, &(0x7f0000000680)=[{0x68, 0x3a, 0x3, "7af18d9f13d6bca69a08817cfd8ac7ef66a1457fc22ae61d9179f5c1d400fe80b44d214056482684e706da90c47d5b168b0e94c1c48870bf27ab0004da4a7d1e40f4cc85ae62e569c68a60c4f97f324e41adcb8257a24f91"}, {0x110, 0xff, 0x7ff80, "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"}, {0xa0, 0x108, 0x400, "2c4ea0b4105b94a9e6cb00de6d21d719bda348ef1e3863583577f36a87bda615fc9d4a703c08ec4bafd9b59fe8cdd6368f2aa290db00c9d29627a62fe3df154fd197c31cfba3878c40c5af57c77f4e3a05fb40461a4016c3801083735ccf59535b048235d1af427629e2011404677a9c9b8f79461d410ce9b76c934136bec9cd70d59b4b2ec38a306a4f9f7fea002bf3"}], 0x218, 0xc840}, 0x38) 02:29:18 executing program 0: socket$qrtr(0x2a, 0x2, 0x0) (async) socketpair(0x21, 0xa, 0x5, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5421, &(0x7f0000000080)) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10) 02:29:18 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) (async) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x3, 0x2}, 0xc) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10040200}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) (async) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'batadv0\x00'}) (async) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) (async) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) 02:29:18 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f0000000000)) 02:29:18 executing program 0: socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x3, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800) r1 = syz_io_uring_complete(0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000180)) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x5421, &(0x7f0000000000)) 02:29:18 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) 02:29:18 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0xffffffffffffffe3, 0x8001}, 0x38) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$qrtr(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x2a, 0x4, 0x2}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000180)="3916e4d09d0476261fc53538340d599307acd40a9de0ac43fda2e7b27e653505528a15cf195310a67338e5efe77de200a77da2fd9e270f0b6eb841c3d8065eecf465edfcba0d9a532f2594298d1381deae6b44c87b6530944d1f9c", 0x5b}, {&(0x7f0000000200)="8b90516202acc1c8af0d555276047f88a94b3a8dd24fe54a0a9c6e743569fd98d6175fa63f0bc264b0b6c9a5e2ee2a69c6fadd32c18ad587aea20f788a356ba8e7aaca99ba82381d5f32379db64bb9113ca6246aa5b4506ba70463d4272910aa54ddc716989747e950db153b3c4be4d9734b2f5d88f0e486667be6ac29ed01064127449ce193d8f7362e209dfe8cf3", 0x8f}], 0x2, &(0x7f0000000680)=[{0x68, 0x3a, 0x3, "7af18d9f13d6bca69a08817cfd8ac7ef66a1457fc22ae61d9179f5c1d400fe80b44d214056482684e706da90c47d5b168b0e94c1c48870bf27ab0004da4a7d1e40f4cc85ae62e569c68a60c4f97f324e41adcb8257a24f91"}, {0x110, 0xff, 0x7ff80, "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"}, {0xa0, 0x108, 0x400, "2c4ea0b4105b94a9e6cb00de6d21d719bda348ef1e3863583577f36a87bda615fc9d4a703c08ec4bafd9b59fe8cdd6368f2aa290db00c9d29627a62fe3df154fd197c31cfba3878c40c5af57c77f4e3a05fb40461a4016c3801083735ccf59535b048235d1af427629e2011404677a9c9b8f79461d410ce9b76c934136bec9cd70d59b4b2ec38a306a4f9f7fea002bf3"}], 0x218, 0xc840}, 0x38) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$qrtr(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0xffffffffffffffe3, 0x8001}, 0x38) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) (async) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) sendmsg$qrtr(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x2a, 0x4, 0x2}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000180)="3916e4d09d0476261fc53538340d599307acd40a9de0ac43fda2e7b27e653505528a15cf195310a67338e5efe77de200a77da2fd9e270f0b6eb841c3d8065eecf465edfcba0d9a532f2594298d1381deae6b44c87b6530944d1f9c", 0x5b}, {&(0x7f0000000200)="8b90516202acc1c8af0d555276047f88a94b3a8dd24fe54a0a9c6e743569fd98d6175fa63f0bc264b0b6c9a5e2ee2a69c6fadd32c18ad587aea20f788a356ba8e7aaca99ba82381d5f32379db64bb9113ca6246aa5b4506ba70463d4272910aa54ddc716989747e950db153b3c4be4d9734b2f5d88f0e486667be6ac29ed01064127449ce193d8f7362e209dfe8cf3", 0x8f}], 0x2, &(0x7f0000000680)=[{0x68, 0x3a, 0x3, "7af18d9f13d6bca69a08817cfd8ac7ef66a1457fc22ae61d9179f5c1d400fe80b44d214056482684e706da90c47d5b168b0e94c1c48870bf27ab0004da4a7d1e40f4cc85ae62e569c68a60c4f97f324e41adcb8257a24f91"}, {0x110, 0xff, 0x7ff80, "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"}, {0xa0, 0x108, 0x400, "2c4ea0b4105b94a9e6cb00de6d21d719bda348ef1e3863583577f36a87bda615fc9d4a703c08ec4bafd9b59fe8cdd6368f2aa290db00c9d29627a62fe3df154fd197c31cfba3878c40c5af57c77f4e3a05fb40461a4016c3801083735ccf59535b048235d1af427629e2011404677a9c9b8f79461d410ce9b76c934136bec9cd70d59b4b2ec38a306a4f9f7fea002bf3"}], 0x218, 0xc840}, 0x38) (async) 02:29:18 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1, 0x7ffe}, 0xc) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x15, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x63, 0x8, "9c0284ea6098f2beacd56affd2007df0605408b2a897d45a635dcccc9394cb0cbd3f99910f19300f70bbed4eadeef03898c10bb3b181e34b098631d75423392531376c1741eda5e641e47fc46432f586a3c0b47db54e94043d5043c827dfc0"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x60000000) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) socket$qrtr(0x2a, 0x2, 0x0) (async) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1, 0x7ffe}, 0xc) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x15, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x63, 0x8, "9c0284ea6098f2beacd56affd2007df0605408b2a897d45a635dcccc9394cb0cbd3f99910f19300f70bbed4eadeef03898c10bb3b181e34b098631d75423392531376c1741eda5e641e47fc46432f586a3c0b47db54e94043d5043c827dfc0"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x60000000) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) 02:29:18 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x3, 0x2}, 0xc) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10040200}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'batadv0\x00'}) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) socket$qrtr(0x2a, 0x2, 0x0) (async) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) (async) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x3, 0x2}, 0xc) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10040200}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) (async) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'batadv0\x00'}) (async) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) (async) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) (async) 02:29:18 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) 02:29:18 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1, 0x7ffe}, 0xc) (async, rerun: 32) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) (rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x15, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x63, 0x8, "9c0284ea6098f2beacd56affd2007df0605408b2a897d45a635dcccc9394cb0cbd3f99910f19300f70bbed4eadeef03898c10bb3b181e34b098631d75423392531376c1741eda5e641e47fc46432f586a3c0b47db54e94043d5043c827dfc0"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x60000000) (async) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:18 executing program 0: socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x3, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800) r1 = syz_io_uring_complete(0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000180)) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x5421, &(0x7f0000000000)) 02:29:18 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) 02:29:18 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x2, 0x8000}, 0xc) 02:29:18 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) (async) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) (async, rerun: 32) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) (rerun: 32) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) (async) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async, rerun: 32) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) (rerun: 32) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() (async) syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) (async) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f0000000000)) 02:29:18 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r2) connect$qrtr(r2, &(0x7f0000000140)={0x2a, 0x0, 0x3fff}, 0xc) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1af110cc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ':'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc4}, 0xc8) 02:29:18 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x2, 0x8000}, 0xc) 02:29:18 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x0, 0x2}, 0xfffffd86) 02:29:18 executing program 0: socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) (async) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x3, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800) r1 = syz_io_uring_complete(0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000180)) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x5421, &(0x7f0000000000)) 02:29:18 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) (async) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) (async, rerun: 32) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) (rerun: 32) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) (async, rerun: 64) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) (async, rerun: 64) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f0000000000)) (rerun: 64) 02:29:18 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0xfffffd86) 02:29:18 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x2, 0x8000}, 0xc) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) (async) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x2, 0x8000}, 0xc) (async) 02:29:19 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) syz_io_uring_setup(0x5760, &(0x7f0000000000)={0x0, 0xaeab, 0x40, 0x3, 0x3ce}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x62, 0x0, @fd_index, 0x7a9, {0x0, r0}, 0x0, 0x2, 0x1, {0x0, 0x0, r0}}, 0x7ff) 02:29:19 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f0000000000)) 02:29:19 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) (async) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r2) (async) connect$qrtr(r2, &(0x7f0000000140)={0x2a, 0x0, 0x3fff}, 0xc) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1af110cc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ':'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc4}, 0xc8) 02:29:19 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x3, 0x2}, 0xc) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10040200}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'batadv0\x00'}) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) 02:29:19 executing program 1: sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) getsockname$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0xc) socketpair(0x2, 0x0, 0x80000000, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$qrtr(r1, &(0x7f0000000340), &(0x7f0000000380)=0xc) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000240)) r3 = getpgid(0x0) syz_open_procfs$namespace(r3, 0x0) ptrace$setregset(0x4205, r3, 0x6, &(0x7f0000000540)={&(0x7f0000000500)="e0ecc0522041173e27b3f33532515dd44bff55ecbbb2f32273bcc33986582b3f2f5522f4722621ccbf29ae032db808ff0e8dc883", 0x34}) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="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", 0xfd}}, 0x4000010) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5d1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x24011}, 0x804) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)='./file0\x00', 0x60, 0x40, 0x23456}, 0x2) r6 = getpid() syz_open_procfs$namespace(r6, &(0x7f0000000580)='ns/time\x00') 02:29:19 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x2c403) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x78, 0x0, 0x2, 0x0, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa3}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008004}, 0x40084) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x49, &(0x7f00000005c0), 0x9}, 0x38) 02:29:19 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r2) connect$qrtr(r2, &(0x7f0000000140)={0x2a, 0x0, 0x3fff}, 0xc) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1af110cc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ':'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc4}, 0xc8) socket$qrtr(0x2a, 0x2, 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r2) (async) connect$qrtr(r2, &(0x7f0000000140)={0x2a, 0x0, 0x3fff}, 0xc) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1af110cc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ':'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc4}, 0xc8) (async) 02:29:19 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x2c403) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x78, 0x0, 0x2, 0x0, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa3}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008004}, 0x40084) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x49, &(0x7f00000005c0), 0x9}, 0x38) 02:29:19 executing program 1: sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) getsockname$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0xc) (async) socketpair(0x2, 0x0, 0x80000000, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$qrtr(r1, &(0x7f0000000340), &(0x7f0000000380)=0xc) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) (async) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000240)) (async) r3 = getpgid(0x0) syz_open_procfs$namespace(r3, 0x0) ptrace$setregset(0x4205, r3, 0x6, &(0x7f0000000540)={&(0x7f0000000500)="e0ecc0522041173e27b3f33532515dd44bff55ecbbb2f32273bcc33986582b3f2f5522f4722621ccbf29ae032db808ff0e8dc883", 0x34}) (async) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="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", 0xfd}}, 0x4000010) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x3) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5d1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x24011}, 0x804) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)='./file0\x00', 0x60, 0x40, 0x23456}, 0x2) (async) r6 = getpid() syz_open_procfs$namespace(r6, &(0x7f0000000580)='ns/time\x00') 02:29:19 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5421, &(0x7f0000000000)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_io_uring_complete(0x0) ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, &(0x7f0000000340)) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) r5 = syz_open_dev$vcsu(&(0x7f0000000300), 0x61, 0x22080) syz_io_uring_complete(r4) syz_io_uring_setup(0x2e2e, &(0x7f00000001c0)={0x0, 0x32e4, 0x8, 0x401, 0x148}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r6, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x2a, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x800) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10002000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4008011}, 0x20000001) 02:29:19 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) syz_io_uring_setup(0x5760, &(0x7f0000000000)={0x0, 0xaeab, 0x40, 0x3, 0x3ce}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x62, 0x0, @fd_index, 0x7a9, {0x0, r0}, 0x0, 0x2, 0x1, {0x0, 0x0, r0}}, 0x7ff) 02:29:19 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x2c403) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x78, 0x0, 0x2, 0x0, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa3}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008004}, 0x40084) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x49, &(0x7f00000005c0), 0x9}, 0x38) 02:29:19 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f0000000000)) 02:29:19 executing program 1: sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) getsockname$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0xc) socketpair(0x2, 0x0, 0x80000000, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$qrtr(r1, &(0x7f0000000340), &(0x7f0000000380)=0xc) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000240)) (async) r3 = getpgid(0x0) syz_open_procfs$namespace(r3, 0x0) ptrace$setregset(0x4205, r3, 0x6, &(0x7f0000000540)={&(0x7f0000000500)="e0ecc0522041173e27b3f33532515dd44bff55ecbbb2f32273bcc33986582b3f2f5522f4722621ccbf29ae032db808ff0e8dc883", 0x34}) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="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", 0xfd}}, 0x4000010) (async) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5d1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x24011}, 0x804) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)='./file0\x00', 0x60, 0x40, 0x23456}, 0x2) r6 = getpid() syz_open_procfs$namespace(r6, &(0x7f0000000580)='ns/time\x00') 02:29:19 executing program 2: r0 = getpgid(0xffffffffffffffff) syz_open_procfs$namespace(r0, 0x0) sched_rr_get_interval(r0, &(0x7f0000000040)) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x2, &(0x7f0000000000)) 02:29:19 executing program 4: socket$qrtr(0x2a, 0x2, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x2c403) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x78, 0x0, 0x2, 0x0, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa3}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008004}, 0x40084) 02:29:19 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) syz_io_uring_setup(0x5760, &(0x7f0000000000)={0x0, 0xaeab, 0x40, 0x3, 0x3ce}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x62, 0x0, @fd_index, 0x7a9, {0x0, r0}, 0x0, 0x2, 0x1, {0x0, 0x0, r0}}, 0x7ff) 02:29:19 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x38) socketpair(0xb, 0x1, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$qrtr(r1, &(0x7f0000000080)={0x2a, 0xffffffff, 0x3fff}, 0xc) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5421, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xcef}]}, 0x2c}}, 0x8000) 02:29:19 executing program 2: r0 = getpgid(0xffffffffffffffff) syz_open_procfs$namespace(r0, 0x0) sched_rr_get_interval(r0, &(0x7f0000000040)) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x2, &(0x7f0000000000)) getpgid(0xffffffffffffffff) (async) syz_open_procfs$namespace(r0, 0x0) (async) sched_rr_get_interval(r0, &(0x7f0000000040)) (async) sched_rr_get_interval(r0, &(0x7f0000000080)) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x2, &(0x7f0000000000)) (async) 02:29:19 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2f}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x300000000000000}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xa561}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x64}, 0x4) 02:29:19 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f0000000000)) 02:29:19 executing program 4: socket$qrtr(0x2a, 0x2, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x2c403) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) 02:29:19 executing program 5: socket$inet6(0xa, 0x2, 0x3) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x80) r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000300)=0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={@empty, 0x1, 0x0, 0x70, 0x0, [{@dev}, {@loopback}, {@multicast2}, {@initdev}, {}, {@empty}, {@empty}]}}) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x880) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:19 executing program 4: socket$qrtr(0x2a, 0x2, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x2c403) 02:29:19 executing program 2: r0 = getpgid(0xffffffffffffffff) syz_open_procfs$namespace(r0, 0x0) (async) sched_rr_get_interval(r0, &(0x7f0000000040)) (async) sched_rr_get_interval(r0, &(0x7f0000000080)) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x2, &(0x7f0000000000)) 02:29:19 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2f}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x300000000000000}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xa561}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x64}, 0x4) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2f}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x300000000000000}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xa561}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x64}, 0x4) (async) 02:29:19 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x38) socketpair(0xb, 0x1, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$qrtr(r1, &(0x7f0000000080)={0x2a, 0xffffffff, 0x3fff}, 0xc) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5421, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xcef}]}, 0x2c}}, 0x8000) 02:29:19 executing program 4: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x2c403) 02:29:19 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:19 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async, rerun: 32) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2f}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x300000000000000}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xa561}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x64}, 0x4) 02:29:19 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x38) socketpair(0xb, 0x1, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$qrtr(r1, &(0x7f0000000080)={0x2a, 0xffffffff, 0x3fff}, 0xc) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5421, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xcef}]}, 0x2c}}, 0x8000) 02:29:19 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000040)) 02:29:19 executing program 4: syz_open_dev$vcsu(0x0, 0x0, 0x2c403) 02:29:19 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) (async) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000040)) 02:29:19 executing program 5: socket$inet6(0xa, 0x2, 0x3) (async) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x80) (async) r0 = socket$qrtr(0x2a, 0x2, 0x0) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000300)=0x3, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={@empty, 0x1, 0x0, 0x70, 0x0, [{@dev}, {@loopback}, {@multicast2}, {@initdev}, {}, {@empty}, {@empty}]}}) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x880) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:19 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:19 executing program 4: syz_open_dev$vcsu(0x0, 0x0, 0x2c403) 02:29:19 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x38) socketpair(0xb, 0x1, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$qrtr(r1, &(0x7f0000000080)={0x2a, 0xffffffff, 0x3fff}, 0xc) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5421, &(0x7f0000000000)) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xcef}]}, 0x2c}}, 0x8000) 02:29:19 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000040)) 02:29:19 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0xffffffffffffffff, 0x2}, 0xc) 02:29:19 executing program 4: syz_open_dev$vcsu(0x0, 0x0, 0x2c403) 02:29:19 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x38) socketpair(0xb, 0x1, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$qrtr(r1, &(0x7f0000000080)={0x2a, 0xffffffff, 0x3fff}, 0xc) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5421, &(0x7f0000000000)) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xcef}]}, 0x2c}}, 0x8000) 02:29:19 executing program 5: socket$inet6(0xa, 0x2, 0x3) (async) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x80) r0 = socket$qrtr(0x2a, 0x2, 0x0) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000300)=0x3, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={@empty, 0x1, 0x0, 0x70, 0x0, [{@dev}, {@loopback}, {@multicast2}, {@initdev}, {}, {@empty}, {@empty}]}}) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x880) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:19 executing program 2: socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="540001000806010300000000000000000a0000060500010007000000050001000700000005000100070000000900000073797a32000000000517017bddcb6ac59409001f6dad070000000500010007000000090002007324c4a41a5ea00ac0cb5a48a2475feddf0530be77d54749ec5696f0a0965101a4e20ab2db425e9e021d38a2cc9392feaacc23abd8e260e7619c41807fa1dd1a754302f27715808c779ecfcf0ee46584fbf793beb0f0fdc66ab7e318988df27f601504c7e8fa875b8851961d8c2f8f37c4cda88ea1f26b1c018108a5fc3f13dcbeb8e06641e5e8a2534a79e94a6609e706c6fb679fd677084a8b7640ffac5318f9cf38"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r3 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x70, r2, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x826}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x70}}, 0x6008442) ioctl$sock_qrtr_TIOCOUTQ(r3, 0x2, &(0x7f0000000000)) 02:29:19 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0xffffffffffffffff, 0x2}, 0xc) 02:29:19 executing program 4: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) 02:29:19 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:19 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x38) socketpair(0xb, 0x1, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$qrtr(r1, &(0x7f0000000080)={0x2a, 0xffffffff, 0x3fff}, 0xc) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5421, &(0x7f0000000000)) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xcef}]}, 0x2c}}, 0x8000) 02:29:19 executing program 4: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) 02:29:19 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0xffffffffffffffff, 0x2}, 0xc) 02:29:19 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0, 0x51}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x20008004}, 0x38) 02:29:19 executing program 2: socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="540001000806010300000000000000000a0000060500010007000000050001000700000005000100070000000900000073797a32000000000517017bddcb6ac59409001f6dad070000000500010007000000090002007324c4a41a5ea00ac0cb5a48a2475feddf0530be77d54749ec5696f0a0965101a4e20ab2db425e9e021d38a2cc9392feaacc23abd8e260e7619c41807fa1dd1a754302f27715808c779ecfcf0ee46584fbf793beb0f0fdc66ab7e318988df27f601504c7e8fa875b8851961d8c2f8f37c4cda88ea1f26b1c018108a5fc3f13dcbeb8e06641e5e8a2534a79e94a6609e706c6fb679fd677084a8b7640ffac5318f9cf38"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r3 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x70, r2, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x826}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x70}}, 0x6008442) ioctl$sock_qrtr_TIOCOUTQ(r3, 0x2, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) (async) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="540001000806010300000000000000000a0000060500010007000000050001000700000005000100070000000900000073797a32000000000517017bddcb6ac59409001f6dad070000000500010007000000090002007324c4a41a5ea00ac0cb5a48a2475feddf0530be77d54749ec5696f0a0965101a4e20ab2db425e9e021d38a2cc9392feaacc23abd8e260e7619c41807fa1dd1a754302f27715808c779ecfcf0ee46584fbf793beb0f0fdc66ab7e318988df27f601504c7e8fa875b8851961d8c2f8f37c4cda88ea1f26b1c018108a5fc3f13dcbeb8e06641e5e8a2534a79e94a6609e706c6fb679fd677084a8b7640ffac5318f9cf38"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x70, r2, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x826}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x70}}, 0x6008442) (async) ioctl$sock_qrtr_TIOCOUTQ(r3, 0x2, &(0x7f0000000000)) (async) 02:29:19 executing program 4: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) 02:29:19 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0, 0x51}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x20008004}, 0x38) 02:29:19 executing program 0: socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x38) socketpair(0xb, 0x1, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$qrtr(r0, &(0x7f0000000080)={0x2a, 0xffffffff, 0x3fff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xcef}]}, 0x2c}}, 0x8000) 02:29:19 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) sendmsg$qrtr(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2a, 0x2, 0x3ffe}, 0xc, &(0x7f0000000440)=[{&(0x7f00000006c0)="76490309d15c9ccc3fad03cc699b13f24e55a7c699a27f80ac600e254a2c6c6294903ed5de73dfb932349e6b30efd83aa8534fcad73ccecd12946c79ece2e4ad486592cf3e8a69958d4b8ba0d0e58d66e6f6196bc48d78e6e45bf0dff9c06d6c2ef1a4d0b291cb4b6aa2e52102962c5e969d7b7e6dea32a67fd0b62b92730580a7828d6c4cf76d89bc30597738575a5ac042e17083574051acfaf5ed4c0ff57b6f2292dd8bb6f8df96aae8c0937100827fdd8a38a1e58731469bc69ed7c842e50d88fa607d49d0c4393fbd75133c1c1b35530e7438847f00c21254942a0ea5c527b1e925067df93af4fbb7eef452d5d98c50ba7763954e16c9f11042f3e52af31b56609abe080fdeea80f34cf2092ef8141253e87c0359b6243822ea66d99b5883a51edba78662d2a1ee784d4cfd1fa294e6ed1320dec8cc74e527c0dfecb212c0007e8ffa2c5ec33f39b538391690e7da006d91ddcc52ec36f6861ddb17fbf3d74ba0bd84ccb11715ddcd413af3ac474ac15b477eac654d7e598617da6f512b28a4599d9bc325ce5b66b0a4322921e30db6ff4be4b1274efb2dc2e71b4d95037de516c29f2796ffa8bc3372f10faf991c3047ea84f3f004191d0a96b631d72bc586b0f98afe0984cf8bca7e5946c07e79c9b570f498202646a05540a6325c914ab99a70da2d2a964fc672e2f42711240aa85cbae63c63bcccbf4aaba72d2c699896bbf6806a94de84ad1a2746876eaed009bc8d768b454c052d6682854064aa1f1991b0b456c2cb78ae092b7f11866c2eb3ffedaef9808e3aa0b827f5f0563f4a286fdabf347de7ba45226aa4692425223bb7684d446adf4337503281ec310731de093fee7a9892993ac2efb8ef094a487e123a5f044c5d772303186da75541d7899639bb5e6597811cc5b606b2aaf97e776f31d96a903763c8e09d8616d66a489f863dd54d47b59a86cd92cda9b37bf99651da4f170e7b5a999b2d335e7bdd8ac101f97c4f3f5aa7ff3e0c2de28f6dc941041de4bda4895586b75cf15fc66701073501686121dd569f188e97018d1dd42c2a1dc81b7ed79145b3bef1e9a281479d86e870df1cf967b47fdd1ca8afab4722cf5cdb089cda7a4a4bf1f0896c7b36ca6a39d646507e8bc3a37abea25b99fe2d8eca35335685ddcd42343a25d7ad1e18d9056ba734748af18ead7acac9e38f04a0d2700e4b47d9ca87154fce5d407b83d575705c2355603684423cb0e5451985c686424730bdcabb2428c953478cef6759b9c0c2d6ee4bef714f168d49ea27c59cb718832ada7ca8dda4a3b9c56afafc06695e372dcf71190019b317feb16ab630640a283a7dab20a4a9a9c99c8ac79a53d5a7012f235828dad620dfa6c69ee6087fa6e19dbeb42e17197c7e0db71122dea0e1098c00f0062ae9851342d31d005319b290af1c0a198733dc2d040a03eaeeca455e1a2794c5b8a4cea082bfb18e870bdc60e43616714b350ff4d37532f71c5a5ae58d6b6544c8a537b008e644eb3b5ed1f76d961fe10349ac1b34a653989e69f860caa64b50af365c4b4ae2567bd2c042ce640033d49d35daa63461794afa203d04eccff4f4f2cd9cbe7c2d4937104c01b6a92882c6b90a83a05b055fab357adc0412a86bd4e7a33a4fc07540ef5407b34150118e041766406dcc931297a05ceb956be51f9e13810ec8dee7a6b16554adc9177007c14c8206e41f2f8f74f51fdea2bad3b86e105d98b313e509dad4b3daf45fa6475b40487d75217e503520c3dd0b781eda7ae51dcc26778b2f8054b70a7140efc8d1a3b1ff5c7d8b72a43d2967f94549a3d8ab55dd8fa8fea054c53ee153d974c02ff2eb034a7e0d80b288035a1cbb8b35557d78179e619cb637150017ff6fe2f11da0ba04fe1809ed7aeca3bff2d5c33637709b4a393808d37db6678476375cebfe0fa120ffcc917fdd64429f5fc7cbb5b2b2b9de8a527c8449a7d628d9de66193fe5e2560839b3f8b371e693513435eb264178addf3a5933ee756bae3389f075ae0921c812fdde8e1af5bfafe8b5db021cb1913109505c98b26a116a37dd45b0a7b3634f6b085a6b7c27d5b0d01e77a78b038833ec2a39b455fb37660f5f858fdc97d9b1e03f034c62949575b0e2aa96b8ab57d6c75f4844edec384707e6f4c7b81e88d79190728836eab2ef3740b108c9ea57c8fd0ee841a3084751a177f16a4782551e791a7098f42a6c3f1176329d9b0612cba9101df489322ee5f8da70ba4c6ff9f7255673be94d7f60aa30060e81c0626cd47d1360941949f346f0fe0ddbd6b4cc84f433bf2c147fbc59f9ecb21a4a3dd42a3be7e1f07e840a38395de3d01e8c1aeb1ff8474a1a301bbb54544aae2e51d935fef7e9e331243de00e85317ee6fed93e1858ef1d1576dcb78d9d44025e5656c12f4545a60da378d14e8e9afa0528b38656bcaa792d3a7155606d139a2744f21cc9952927bc8288b5af9a13e619587298ef18ae4ead0d73c79b7cb5a7780d12871557ff3a16a47d6c6c170afad1eebc4a35b72e0e449d8ceb3ec0693da392d51b6793723ed8a987b06a84773544cf13be72d9d5d37c3e7ea0c752f5f7aa51b08325f234a6da804609fb7bd8ddee48388ec286152144d0f3a5d17b4ea9f6a3b206eb185f4134ce1684a93c9318ccd06824bd244da466afc9979b9b2b9881248dc714ee490b800294e9f145ffb1490a627c0b13f31a70b435c5f0fcb34bb7a005f0f4db5bb89a2bb002b9836624a9ce91bab68dcf98bd7d135b3c41e8b8789ba27cce9580ba738dce403d5c5d34fc6056439a47331bea3799755e09e9c615a30168ae1f0134e68fb81f4bd20111f85cb585b7f920603625b79c090e4c77fd9436664e724785a567f0ac6692d79639849e32650e499e8601a2f8ca1c48c603f4ff514fff3244af6b40fabf99cad463e89985910e4b34ac33b689a7d50d377dc7fdd6621e2f3586f29f64a92050cf65356fb4736ac86de031db543494d763835ba4be8356c4e3f4d95172052df6c092842cdb0e03abcdec53c19a8fc9b921ce39604913414e8e28ebc9d106b23fa3bdd31c2f6e1e7d8bb24403ac5d1b1fb01275b5038dda5c863d6f03b36cfc918a3b57125b6820c4a9280ac5f008b805269716a31ede1711d8d2a0b414593a1dbf6d4520a6b08dc1a53a2fe7c83cff669762d08a823b8c37a19ff47fd2d331d9f842208e1150f5592b75024b1c7396802f63c182a47da1ec51846405b6114a7d3376d6d24ecf2d9f6d0c822f7e49baa535ec8055bd87aab447420ee2e18755164dfec77b560dea785f7f20b0b167d323f22965f5532aba25f7b724f95623bbbb169fe060ecff005cdc430aba3ae15ec7c8cc87cc850c7294df026d9e477b3f9fb9524f95ea65a165198181b480427e6baa63679f946e7042746764142c2f06ff0df0d1f7e322e914babca79c91340ca9da056e564211a2b5581bf85dff2835f90df85af48789a30ba1572104e52ebba6883dfd5e0d73c761f9774e8f7f2c9bc0d206ff4b60431bbb8888ac485faf84d29ee3eb0c3594f99941b7df19e91e2ca0bf91d55c95a62e96b855c5ba60cf968d81a8482172fcbcadf3472504f49fe9bb39fe058c49324d3a99de97cf3207f9f2f5df1943a0e45fe802eadac25cda96efa19642d3fff4bab69e8edb7430eb711b3be1002029651f1f6eef37400c9368e51c4edeebad5c4b1a6c1d7ec0f2646033a8bac656af6f3685f23433b710cdc8e5014d5aca219346111ad0a5665863c405a3ae4190d5e997f60474d28c741a0d42cf82fced30a2b9b4eeb81dfdbc013c4e7cd5feb859f1422eabad5c0c35b194dc0f1f6512d9acda009589f75c82940f998c59ad0987ee4e97007ab8a31a13158c391c6ac85c111f855e5d38e91f48e5cd8f0b67485ea181a9e474428d4f01ef388071f01a7a4402854b95cb8b76f42decc32556d8da7ff2a4c4176989276d6120c8d8caa389a3b155d60e0d151dbca5104240a1145a6044161d4a82bc287c15b9603affc0042eb6052232d292ff5c412e527220c51f7c3c6c5682febe4772b5796d5c6f11811ece3a94612a43b393139848edd183595f48ac9ed02334e24cd1a3aa7f9d1515dcfe93927463b1f0db72fed191a31841dc479d6319c396edbd7a01f46b29a7aec051f775353583e4474e0f6c25784017eac8a17c13a1741177cc52de5d36dba75a4e1e61b66786ed84895d9896dbea2f5c31a912f3283ec7b223b8ebcbef876f39436818923f48e5887ebfef90abff26dc5383ecb26165182647e3ce60f34a6b37c64c569c00d3b15babc93dfec8323c2cf95a9143e3bab3acfd3be52e29ee628d7b940bf52c4eb7e303f95eb626c8174115aadd249d8c31b98d7717418c0157762bdcaeb982e25bad5ea49d5b372554fdc807bd014cbba12bfcf0c037cec67b3e02f4c21c4d6f8dde003711b58de20e3dccc171b9662ed3ad4e4d865e6a2ab5a689e27b36af653cec3fc772b3c33e0975b4f18e6d46c08c87bb14951465931cfc92d62c3e9e04725ed8a5f2f49b430cbdefb0d6ac7532175d2c6a4e4b1125ac530534ceeae493d881ab750da4a3e63adde04052a56d8854b6798aaaf3510d8d757d5c89c85970929bc7c7573d6cc561072f57ecfb1ea352f2db3e42dc8ddc91d081423c0aa02d764464b4b9bd194d4bbd6671e9a29836954627bad8a311a1ef062d9ee48890765eb34679858237a1dcb1148c1ec4a84661cd6f3d05c97e82d926c663f8160dacc517770c728e99dab2e9101040e136d1e43ad5df169d65b179578303ad888cb3bfdf08c0162710a9366de2d71c2b9564cceefec91fdc591785cf9392cf8ece83eb88bd908e3762c48b09bca72cfdf2c7d1429590026273c76ccf7ae7245100461ccdb61d96b5e9750f5968e9691afcd58737d8460262161c61daf8741200f038c53ae575482fde7a74e4ffa404f22fc6e0ba2545f49ab9c9b3397182c4c6575e53c7a55b1c5e0b92e9c512d0764d5f473e1c9dbc3270d50b95c2fea49d127f02faa0f24763bb2c95c76a81fd65ed7ec19532974301f098b0a789dbd828513985cb1ea3c041b48d410e20bf40820cc76838726c32457519a6db10193d1e5e0d8dded08d5ecdb1c8a55f3cbab316698b15d30d0b357d75c8f512892576ac41c4f83d9ff413ddeedf91de62b2244781334060ad1aedee40057326b201fedc387a4d47d0d85d7f36a470689b7a60c75d1b003d68ffc4e21a48ca3aa6e66b60bfd04e653ff732fb3997d8c524c737e8711cb17219ce8655557c54b3124e2af5a68a7ab3876ee9fb9044245a2e9c7a3d883fd3d613786bc3b24a94110ec76aeaa4576cb310819809b7d8c33f782affe01b86d3e60eec3a6f81e1289f7cab3f1f0441c1a606c290b0ddc3e1c98573d55102449650270b408284e0c8e8ccaf50e84a81574340a794e7b5d6d39e97da2e7d85d98e3c44a95eb3a2c21ab67b7d4918eb8d69f3f049c36fa24a8aae0a77f6282d015070aa1ed02b5b9e6a85e07ef6bdc686f16a37b1b4f286b304b288fb1f1934886a4e655adcb6ef90bea80c01a6bce80781f3a716907015e1d2244b3e20b3748edc1ab71dee26fdb97da73eff7286d509d027b47572437be4fbb35ab7275c9791c4894b0f1dc050fb0130583864b06524cc908ad9d4bd660ea2c295f95a569b1b5769a2508ec654a7d9e3edc16bf8fc0c1b5c93b406933686d5adddb5f468dd7c38bf48b083fa8d8f3582ba5f5f50f05193a1ac2c72f05906f0720856045a0be9d8f97e5cc4f2d6fa25ccb1f99", 0x1000}, {&(0x7f0000000040)="b19c1359c537060ff65bde870b44318116201688", 0x14}, {&(0x7f0000000080)="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", 0xfa}, {&(0x7f0000000180)="16015baf5106475435b68aa74c472930090540864cf1238000aba7ba8da3c321c0f478df7d5187b186b07d839d8c249227d6a08366755c171f0175d3d70131cb374077c20ca327468d62f5583cb6cdb9662799c6ee5f278bccea949d106882240e93f535ee71a5c90557f20ee44305e33490e50146ac77a33907970117307cb7831374e4a29092958afdc62f35514aee7ec79ab2123807ff7eaa", 0x9a}, {&(0x7f0000000240)="e34af6a05dc9d4e9ac5759939680d85a93c803be8ee0694fd7092f5384a21bd031a462026cd7ed86c3f64c0e56dc2f433fdf9ceac0205d7b41c33ab85be460da52c77c44c0cb89386ac92ceb2acf52a325e8744efd7d71f70500c2a99e6c63be04fa0f72e9d0d10ef3215c525232a3181b4f14034969c9092ee1a69bc28d4d3241d3316fb1dd34df779618760fb1c0f5a8658a50c584e8e79dd6e8f6266f1a133471f1e2544543df3295f67684162770eb5bf6033e506d1dea2a328bbe", 0xbd}, {&(0x7f0000000300)="533f377c61409267bf61d27a1938d6726e817e7edb874ff2ec0565026cda1ec64d5ecda779dbc306207767f4c37a97c12f5f94e038918a41f30f70e2cdc549f27469f72ad77c105cfa1d193683d6234f4c05a4bfb5a0d3c2df212093cbda83d8a0915ec4182aad3974ae8ef63e95c8f79bb1021d006609782c", 0x79}, {&(0x7f0000000380)="ce758afd166d7dca6c8830d5c9cdd9714a74e1562228b54c0dbff71f7792912b4a6527a93edc74f69a2b10c7444d4d1cd6adf2964125f70ac89620d863d90ae9e393f63b5de1d976110a75e0d1727311df544b63bda98eee48d7427a8517ba947ce9cefbcbac8da7d790608913a00ba3a46ed9f01abaf67637c4fa8925c4586857e7683b448572f85feda174643f5fe815653153a283493cbce78c848a40617d21d4c67935904172f7ba", 0xaa}], 0x7, 0x0, 0x0, 0x40000}, 0x38) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) recvmsg$qrtr(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000540)=""/1, 0x1}, {&(0x7f00000016c0)=""/117, 0x75}, {&(0x7f0000001740)=""/106, 0x6a}, {&(0x7f00000017c0)=""/155, 0x9b}, {&(0x7f0000001880)=""/85, 0x55}, {&(0x7f0000001900)=""/101, 0x65}], 0x7, &(0x7f0000001a00)=[{0x1010, 0x0, 0x0, ""/4096}, {0x20, 0x0, 0x0, ""/14}, {0x70, 0x0, 0x0, ""/90}, {0xb0, 0x0, 0x0, ""/153}, {0x30, 0x0, 0x0, ""/28}, {0x50, 0x0, 0x0, ""/62}, {0xc0, 0x0, 0x0, ""/171}, {0x28, 0x0, 0x0, ""/19}, {0x1010, 0x0, 0x0, ""/4096}], 0x22c8, 0x10000}, 0x38, 0x10021) 02:29:19 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:19 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:19 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0, 0x51}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x20008004}, 0x38) 02:29:19 executing program 2: socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="540001000806010300000000000000000a0000060500010007000000050001000700000005000100070000000900000073797a32000000000517017bddcb6ac59409001f6dad070000000500010007000000090002007324c4a41a5ea00ac0cb5a48a2475feddf0530be77d54749ec5696f0a0965101a4e20ab2db425e9e021d38a2cc9392feaacc23abd8e260e7619c41807fa1dd1a754302f27715808c779ecfcf0ee46584fbf793beb0f0fdc66ab7e318988df27f601504c7e8fa875b8851961d8c2f8f37c4cda88ea1f26b1c018108a5fc3f13dcbeb8e06641e5e8a2534a79e94a6609e706c6fb679fd677084a8b7640ffac5318f9cf38"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r3 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x70, r2, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x826}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x70}}, 0x6008442) ioctl$sock_qrtr_TIOCOUTQ(r3, 0x2, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) (async) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="540001000806010300000000000000000a0000060500010007000000050001000700000005000100070000000900000073797a32000000000517017bddcb6ac59409001f6dad070000000500010007000000090002007324c4a41a5ea00ac0cb5a48a2475feddf0530be77d54749ec5696f0a0965101a4e20ab2db425e9e021d38a2cc9392feaacc23abd8e260e7619c41807fa1dd1a754302f27715808c779ecfcf0ee46584fbf793beb0f0fdc66ab7e318988df27f601504c7e8fa875b8851961d8c2f8f37c4cda88ea1f26b1c018108a5fc3f13dcbeb8e06641e5e8a2534a79e94a6609e706c6fb679fd677084a8b7640ffac5318f9cf38"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x70, r2, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x826}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x70}}, 0x6008442) (async) ioctl$sock_qrtr_TIOCOUTQ(r3, 0x2, &(0x7f0000000000)) (async) 02:29:19 executing program 0: socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x38) socketpair(0xb, 0x1, 0x3, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xcef}]}, 0x2c}}, 0x8000) 02:29:19 executing program 5: socket$qrtr(0x2a, 0x2, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) sendmsg$qrtr(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="303c52b11b7965a7b0cda05b134aab9b8acd9a639fa83b0a1d6d675698e3edd5bda61a9509fd8f", 0x27}, {&(0x7f0000000180)="57e5349679850dd870f6784a65c0d8a1644cb48608131e898a5072a95f66666d6d69c4750b26a78a5c7ef9246244c3aea68e83fb9e07e8517c8c30ff7ed4f7f208d64a6939fbec945f92fa55c3489cd00d3e7c490ed5a026106bca489642430b11a447817a005d24869df3a1f399", 0x6e}, {&(0x7f0000000200)}, {&(0x7f0000000240)="bf541cad43f8a961b0167d3c672caf58a4a7aae1cb71a2bc000000", 0x1b}, {&(0x7f0000000280)="80ebefe3c1368f510a48912c79efc60bd0e6773a434741f75cd4f3d7f11e2c047147b7f345c115dd25484a111d0500000000000000c58c4e1a4ab7af6e0e0f11480b11f34fc72c810570810b484932aa3425eed14fb4a5d7654709038b23fcf1813c939916ded49fdefc657b641084d98c2d974a3b1b50e7891ff2a35680", 0x7e}, {&(0x7f0000000300)="fb2337ef9b44a75d6c746d6c09cebf064c85a8bf32", 0x15}, {&(0x7f0000000340)="e8f58a5843517789311e4bdb38f1ce0ca1ba07521d3381df6a99207cce99af25d97a783817d7beb56d2bbad509d86fc606ff2926595eff945abe75ad69881f8c63434cff22a2b6f98180dd2c135f18c34e5f587d5dac797727ece888029cc18cf31311d92c02034cd4fb3fb1d7b191c8f3851d6a3f417e04b3cca45c449a05bf10e10a553875f85ea44df40d74aa0a61d904eedc1cfa307de45b684095", 0x9d}, {&(0x7f00000006c0)="edcc8c0683c53b4984d3f3b503742091ae480d7f0f7ae5f2790ff0148d7254b7f36322ec70ac06646fb598277a4026107683c7f86818640fbb3cace3f4fcb93525f228cb02d5b0225474414d6021c313243b0d65e20ab2e80f755a960b86d9f212f8c09ae95a7607dcf2f5cdfacc9c68cba2d38b7ef854bb6d32d475a903681759efa7f8edc412f98a99531a9d648b44be814a43605a4b19256d659793c322749f8166ff0aea8143eea706faa6b125b29788692fa8a090184222564a8533f6e2b023d97ce7949717503bb0e2e76a7f4c5aaa9b66c2427bda5f35c9287be489ff7eb329c8e2e18da7b2aa7c9255d7e9048131e229fa7576e4ab872247c7041ab1d760a402275eb864faaa31cb754cc38a372ed6570000", 0x116}], 0x8, 0x0, 0x0, 0x4000081}, 0x38) connect$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x0, 0xfffffffe}, 0xc) connect$qrtr(r0, &(0x7f0000000100)={0x2a, 0x0, 0x3fff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 02:29:19 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:19 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) sendmsg$qrtr(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2a, 0x2, 0x3ffe}, 0xc, &(0x7f0000000440)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000000040)="b19c1359c537060ff65bde870b44318116201688", 0x14}, {&(0x7f0000000080)="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", 0xfa}, {&(0x7f0000000180)="16015baf5106475435b68aa74c472930090540864cf1238000aba7ba8da3c321c0f478df7d5187b186b07d839d8c249227d6a08366755c171f0175d3d70131cb374077c20ca327468d62f5583cb6cdb9662799c6ee5f278bccea949d106882240e93f535ee71a5c90557f20ee44305e33490e50146ac77a33907970117307cb7831374e4a29092958afdc62f35514aee7ec79ab2123807ff7eaa", 0x9a}, {&(0x7f0000000240)="e34af6a05dc9d4e9ac5759939680d85a93c803be8ee0694fd7092f5384a21bd031a462026cd7ed86c3f64c0e56dc2f433fdf9ceac0205d7b41c33ab85be460da52c77c44c0cb89386ac92ceb2acf52a325e8744efd7d71f70500c2a99e6c63be04fa0f72e9d0d10ef3215c525232a3181b4f14034969c9092ee1a69bc28d4d3241d3316fb1dd34df779618760fb1c0f5a8658a50c584e8e79dd6e8f6266f1a133471f1e2544543df3295f67684162770eb5bf6033e506d1dea2a328bbe", 0xbd}, {&(0x7f0000000300)="533f377c61409267bf61d27a1938d6726e817e7edb874ff2ec0565026cda1ec64d5ecda779dbc306207767f4c37a97c12f5f94e038918a41f30f70e2cdc549f27469f72ad77c105cfa1d193683d6234f4c05a4bfb5a0d3c2df212093cbda83d8a0915ec4182aad3974ae8ef63e95c8f79bb1021d006609782c", 0x79}, {&(0x7f0000000380)="ce758afd166d7dca6c8830d5c9cdd9714a74e1562228b54c0dbff71f7792912b4a6527a93edc74f69a2b10c7444d4d1cd6adf2964125f70ac89620d863d90ae9e393f63b5de1d976110a75e0d1727311df544b63bda98eee48d7427a8517ba947ce9cefbcbac8da7d790608913a00ba3a46ed9f01abaf67637c4fa8925c4586857e7683b448572f85feda174643f5fe815653153a283493cbce78c848a40617d21d4c67935904172f7ba", 0xaa}], 0x7, 0x0, 0x0, 0x40000}, 0x38) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) recvmsg$qrtr(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000540)=""/1, 0x1}, {&(0x7f00000016c0)=""/117, 0x75}, {&(0x7f0000001740)=""/106, 0x6a}, {&(0x7f00000017c0)=""/155, 0x9b}, {&(0x7f0000001880)=""/85, 0x55}, {&(0x7f0000001900)=""/101, 0x65}], 0x7, &(0x7f0000001a00)=[{0x1010, 0x0, 0x0, ""/4096}, {0x20, 0x0, 0x0, ""/14}, {0x70, 0x0, 0x0, ""/90}, {0xb0, 0x0, 0x0, ""/153}, {0x30, 0x0, 0x0, ""/28}, {0x50, 0x0, 0x0, ""/62}, {0xc0, 0x0, 0x0, ""/171}, {0x28, 0x0, 0x0, ""/19}, {0x1010, 0x0, 0x0, ""/4096}], 0x22c8, 0x10000}, 0x38, 0x10021) 02:29:19 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:19 executing program 0: socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x38) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xcef}]}, 0x2c}}, 0x8000) 02:29:19 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000280)={{}, {0x0, r1/1000+10000}}, &(0x7f00000002c0)) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) 02:29:19 executing program 5: socket$qrtr(0x2a, 0x2, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) sendmsg$qrtr(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="303c52b11b7965a7b0cda05b134aab9b8acd9a639fa83b0a1d6d675698e3edd5bda61a9509fd8f", 0x27}, {&(0x7f0000000180)="57e5349679850dd870f6784a65c0d8a1644cb48608131e898a5072a95f66666d6d69c4750b26a78a5c7ef9246244c3aea68e83fb9e07e8517c8c30ff7ed4f7f208d64a6939fbec945f92fa55c3489cd00d3e7c490ed5a026106bca489642430b11a447817a005d24869df3a1f399", 0x6e}, {&(0x7f0000000200)}, {&(0x7f0000000240)="bf541cad43f8a961b0167d3c672caf58a4a7aae1cb71a2bc000000", 0x1b}, {&(0x7f0000000280)="80ebefe3c1368f510a48912c79efc60bd0e6773a434741f75cd4f3d7f11e2c047147b7f345c115dd25484a111d0500000000000000c58c4e1a4ab7af6e0e0f11480b11f34fc72c810570810b484932aa3425eed14fb4a5d7654709038b23fcf1813c939916ded49fdefc657b641084d98c2d974a3b1b50e7891ff2a35680", 0x7e}, {&(0x7f0000000300)="fb2337ef9b44a75d6c746d6c09cebf064c85a8bf32", 0x15}, {&(0x7f0000000340)="e8f58a5843517789311e4bdb38f1ce0ca1ba07521d3381df6a99207cce99af25d97a783817d7beb56d2bbad509d86fc606ff2926595eff945abe75ad69881f8c63434cff22a2b6f98180dd2c135f18c34e5f587d5dac797727ece888029cc18cf31311d92c02034cd4fb3fb1d7b191c8f3851d6a3f417e04b3cca45c449a05bf10e10a553875f85ea44df40d74aa0a61d904eedc1cfa307de45b684095", 0x9d}, {&(0x7f00000006c0)="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", 0x116}], 0x8, 0x0, 0x0, 0x4000081}, 0x38) (async, rerun: 64) connect$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x0, 0xfffffffe}, 0xc) (rerun: 64) connect$qrtr(r0, &(0x7f0000000100)={0x2a, 0x0, 0x3fff}, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 02:29:19 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) sendmsg$qrtr(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2a, 0x2, 0x3ffe}, 0xc, &(0x7f0000000440)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000000040)="b19c1359c537060ff65bde870b44318116201688", 0x14}, {&(0x7f0000000080)="18f9a0d101aaee4c4e42d45e19fb5accf35abdfd94bf3866832bb8691bc8c4444add04dacaf0518972ffc0172f1828b57e165d517ede4d43c882c23f18ac3b59b476a9e8e51136052ca4378f2259c9144309edf574c93a3844030046fd96c1599bcccf24d784c7eb1025dbca805ebafef9318aa51e215dc01fadced22e9e2e81c710784d8c16379119fdf548d5eed0c9ff2c963e28c7ff5f3a58569ab68c824b2d93564c484d592d0e86328320fdfb56ac500655e5e88c9140c49745c589610dc00b17c843916a4491be168a67babcd8256446a59f237c06da1d3ad603271c86cadba12c0335bbad476ad506858485546fb4454692c272e16252", 0xfa}, {&(0x7f0000000180)="16015baf5106475435b68aa74c472930090540864cf1238000aba7ba8da3c321c0f478df7d5187b186b07d839d8c249227d6a08366755c171f0175d3d70131cb374077c20ca327468d62f5583cb6cdb9662799c6ee5f278bccea949d106882240e93f535ee71a5c90557f20ee44305e33490e50146ac77a33907970117307cb7831374e4a29092958afdc62f35514aee7ec79ab2123807ff7eaa", 0x9a}, {&(0x7f0000000240)="e34af6a05dc9d4e9ac5759939680d85a93c803be8ee0694fd7092f5384a21bd031a462026cd7ed86c3f64c0e56dc2f433fdf9ceac0205d7b41c33ab85be460da52c77c44c0cb89386ac92ceb2acf52a325e8744efd7d71f70500c2a99e6c63be04fa0f72e9d0d10ef3215c525232a3181b4f14034969c9092ee1a69bc28d4d3241d3316fb1dd34df779618760fb1c0f5a8658a50c584e8e79dd6e8f6266f1a133471f1e2544543df3295f67684162770eb5bf6033e506d1dea2a328bbe", 0xbd}, {&(0x7f0000000300)="533f377c61409267bf61d27a1938d6726e817e7edb874ff2ec0565026cda1ec64d5ecda779dbc306207767f4c37a97c12f5f94e038918a41f30f70e2cdc549f27469f72ad77c105cfa1d193683d6234f4c05a4bfb5a0d3c2df212093cbda83d8a0915ec4182aad3974ae8ef63e95c8f79bb1021d006609782c", 0x79}, {&(0x7f0000000380)="ce758afd166d7dca6c8830d5c9cdd9714a74e1562228b54c0dbff71f7792912b4a6527a93edc74f69a2b10c7444d4d1cd6adf2964125f70ac89620d863d90ae9e393f63b5de1d976110a75e0d1727311df544b63bda98eee48d7427a8517ba947ce9cefbcbac8da7d790608913a00ba3a46ed9f01abaf67637c4fa8925c4586857e7683b448572f85feda174643f5fe815653153a283493cbce78c848a40617d21d4c67935904172f7ba", 0xaa}], 0x7, 0x0, 0x0, 0x40000}, 0x38) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) recvmsg$qrtr(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000540)=""/1, 0x1}, {&(0x7f00000016c0)=""/117, 0x75}, {&(0x7f0000001740)=""/106, 0x6a}, {&(0x7f00000017c0)=""/155, 0x9b}, {&(0x7f0000001880)=""/85, 0x55}, {&(0x7f0000001900)=""/101, 0x65}], 0x7, &(0x7f0000001a00)=[{0x1010, 0x0, 0x0, ""/4096}, {0x20, 0x0, 0x0, ""/14}, {0x70, 0x0, 0x0, ""/90}, {0xb0, 0x0, 0x0, ""/153}, {0x30, 0x0, 0x0, ""/28}, {0x50, 0x0, 0x0, ""/62}, {0xc0, 0x0, 0x0, ""/171}, {0x28, 0x0, 0x0, ""/19}, {0x1010, 0x0, 0x0, ""/4096}], 0x22c8, 0x10000}, 0x38, 0x10021) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) sendmsg$qrtr(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2a, 0x2, 0x3ffe}, 0xc, &(0x7f0000000440)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000000040)="b19c1359c537060ff65bde870b44318116201688", 0x14}, {&(0x7f0000000080)="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", 0xfa}, {&(0x7f0000000180)="16015baf5106475435b68aa74c472930090540864cf1238000aba7ba8da3c321c0f478df7d5187b186b07d839d8c249227d6a08366755c171f0175d3d70131cb374077c20ca327468d62f5583cb6cdb9662799c6ee5f278bccea949d106882240e93f535ee71a5c90557f20ee44305e33490e50146ac77a33907970117307cb7831374e4a29092958afdc62f35514aee7ec79ab2123807ff7eaa", 0x9a}, {&(0x7f0000000240)="e34af6a05dc9d4e9ac5759939680d85a93c803be8ee0694fd7092f5384a21bd031a462026cd7ed86c3f64c0e56dc2f433fdf9ceac0205d7b41c33ab85be460da52c77c44c0cb89386ac92ceb2acf52a325e8744efd7d71f70500c2a99e6c63be04fa0f72e9d0d10ef3215c525232a3181b4f14034969c9092ee1a69bc28d4d3241d3316fb1dd34df779618760fb1c0f5a8658a50c584e8e79dd6e8f6266f1a133471f1e2544543df3295f67684162770eb5bf6033e506d1dea2a328bbe", 0xbd}, {&(0x7f0000000300)="533f377c61409267bf61d27a1938d6726e817e7edb874ff2ec0565026cda1ec64d5ecda779dbc306207767f4c37a97c12f5f94e038918a41f30f70e2cdc549f27469f72ad77c105cfa1d193683d6234f4c05a4bfb5a0d3c2df212093cbda83d8a0915ec4182aad3974ae8ef63e95c8f79bb1021d006609782c", 0x79}, {&(0x7f0000000380)="ce758afd166d7dca6c8830d5c9cdd9714a74e1562228b54c0dbff71f7792912b4a6527a93edc74f69a2b10c7444d4d1cd6adf2964125f70ac89620d863d90ae9e393f63b5de1d976110a75e0d1727311df544b63bda98eee48d7427a8517ba947ce9cefbcbac8da7d790608913a00ba3a46ed9f01abaf67637c4fa8925c4586857e7683b448572f85feda174643f5fe815653153a283493cbce78c848a40617d21d4c67935904172f7ba", 0xaa}], 0x7, 0x0, 0x0, 0x40000}, 0x38) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) recvmsg$qrtr(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000540)=""/1, 0x1}, {&(0x7f00000016c0)=""/117, 0x75}, {&(0x7f0000001740)=""/106, 0x6a}, {&(0x7f00000017c0)=""/155, 0x9b}, {&(0x7f0000001880)=""/85, 0x55}, {&(0x7f0000001900)=""/101, 0x65}], 0x7, &(0x7f0000001a00)=[{0x1010, 0x0, 0x0, ""/4096}, {0x20, 0x0, 0x0, ""/14}, {0x70, 0x0, 0x0, ""/90}, {0xb0, 0x0, 0x0, ""/153}, {0x30, 0x0, 0x0, ""/28}, {0x50, 0x0, 0x0, ""/62}, {0xc0, 0x0, 0x0, ""/171}, {0x28, 0x0, 0x0, ""/19}, {0x1010, 0x0, 0x0, ""/4096}], 0x22c8, 0x10000}, 0x38, 0x10021) (async) 02:29:19 executing program 0: socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xcef}]}, 0x2c}}, 0x8000) 02:29:19 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:19 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000280)={{}, {0x0, r1/1000+10000}}, &(0x7f00000002c0)) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) socket$qrtr(0x2a, 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000240)) (async) setitimer(0x0, &(0x7f0000000280)={{}, {0x0, r1/1000+10000}}, &(0x7f00000002c0)) (async) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) (async) 02:29:19 executing program 5: socket$qrtr(0x2a, 0x2, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) sendmsg$qrtr(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="303c52b11b7965a7b0cda05b134aab9b8acd9a639fa83b0a1d6d675698e3edd5bda61a9509fd8f", 0x27}, {&(0x7f0000000180)="57e5349679850dd870f6784a65c0d8a1644cb48608131e898a5072a95f66666d6d69c4750b26a78a5c7ef9246244c3aea68e83fb9e07e8517c8c30ff7ed4f7f208d64a6939fbec945f92fa55c3489cd00d3e7c490ed5a026106bca489642430b11a447817a005d24869df3a1f399", 0x6e}, {&(0x7f0000000200)}, {&(0x7f0000000240)="bf541cad43f8a961b0167d3c672caf58a4a7aae1cb71a2bc000000", 0x1b}, {&(0x7f0000000280)="80ebefe3c1368f510a48912c79efc60bd0e6773a434741f75cd4f3d7f11e2c047147b7f345c115dd25484a111d0500000000000000c58c4e1a4ab7af6e0e0f11480b11f34fc72c810570810b484932aa3425eed14fb4a5d7654709038b23fcf1813c939916ded49fdefc657b641084d98c2d974a3b1b50e7891ff2a35680", 0x7e}, {&(0x7f0000000300)="fb2337ef9b44a75d6c746d6c09cebf064c85a8bf32", 0x15}, {&(0x7f0000000340)="e8f58a5843517789311e4bdb38f1ce0ca1ba07521d3381df6a99207cce99af25d97a783817d7beb56d2bbad509d86fc606ff2926595eff945abe75ad69881f8c63434cff22a2b6f98180dd2c135f18c34e5f587d5dac797727ece888029cc18cf31311d92c02034cd4fb3fb1d7b191c8f3851d6a3f417e04b3cca45c449a05bf10e10a553875f85ea44df40d74aa0a61d904eedc1cfa307de45b684095", 0x9d}, {&(0x7f00000006c0)="edcc8c0683c53b4984d3f3b503742091ae480d7f0f7ae5f2790ff0148d7254b7f36322ec70ac06646fb598277a4026107683c7f86818640fbb3cace3f4fcb93525f228cb02d5b0225474414d6021c313243b0d65e20ab2e80f755a960b86d9f212f8c09ae95a7607dcf2f5cdfacc9c68cba2d38b7ef854bb6d32d475a903681759efa7f8edc412f98a99531a9d648b44be814a43605a4b19256d659793c322749f8166ff0aea8143eea706faa6b125b29788692fa8a090184222564a8533f6e2b023d97ce7949717503bb0e2e76a7f4c5aaa9b66c2427bda5f35c9287be489ff7eb329c8e2e18da7b2aa7c9255d7e9048131e229fa7576e4ab872247c7041ab1d760a402275eb864faaa31cb754cc38a372ed6570000", 0x116}], 0x8, 0x0, 0x0, 0x4000081}, 0x38) (async) connect$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x0, 0xfffffffe}, 0xc) (async) connect$qrtr(r0, &(0x7f0000000100)={0x2a, 0x0, 0x3fff}, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 02:29:19 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xcef}]}, 0x2c}}, 0x8000) 02:29:20 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000280)={{}, {0x0, r1/1000+10000}}, &(0x7f00000002c0)) (async) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x2, &(0x7f0000000000)) 02:29:20 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xcef}]}, 0x2c}}, 0x8000) 02:29:20 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac000000150a010300000000000000000a000006380008004e31eb2ef0d33db6798668f670e58808b7b78d92d96f6653ca6ffa4840986be885693879004a4b1e3a57d0e264a12177ac31d34a0900010073797a31000000000c0006400000000000000002080003400000000a080003400000000a1e0008007a78e4bef4619351016ef0eaffa99f340cd06aa4fc257c01ec4f00000c00064000000000000000050900020073797a3000000000e43579b15facd55a6f1b44186525f36b7cd3445c9849999fe61d6c5124c98d6c2890450ae5e3112c44eadf6d"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x2404c801) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x64, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}}, 0x20000001) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5aa}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:20 executing program 1: ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x9) r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x5) 02:29:20 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:20 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:20 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:20 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac000000150a010300000000000000000a000006380008004e31eb2ef0d33db6798668f670e58808b7b78d92d96f6653ca6ffa4840986be885693879004a4b1e3a57d0e264a12177ac31d34a0900010073797a31000000000c0006400000000000000002080003400000000a080003400000000a1e0008007a78e4bef4619351016ef0eaffa99f340cd06aa4fc257c01ec4f00000c00064000000000000000050900020073797a3000000000e43579b15facd55a6f1b44186525f36b7cd3445c9849999fe61d6c5124c98d6c2890450ae5e3112c44eadf6d"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x2404c801) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x64, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}}, 0x20000001) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5aa}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac000000150a010300000000000000000a000006380008004e31eb2ef0d33db6798668f670e58808b7b78d92d96f6653ca6ffa4840986be885693879004a4b1e3a57d0e264a12177ac31d34a0900010073797a31000000000c0006400000000000000002080003400000000a080003400000000a1e0008007a78e4bef4619351016ef0eaffa99f340cd06aa4fc257c01ec4f00000c00064000000000000000050900020073797a3000000000e43579b15facd55a6f1b44186525f36b7cd3445c9849999fe61d6c5124c98d6c2890450ae5e3112c44eadf6d"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x2404c801) (async) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x64, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}}, 0x20000001) (async) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5aa}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) 02:29:20 executing program 1: ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x9) (async) r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x5) 02:29:20 executing program 1: ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x9) (async, rerun: 64) r0 = socket$qrtr(0x2a, 0x2, 0x0) (rerun: 64) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x5) 02:29:20 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xcef}]}, 0x2c}}, 0x8000) 02:29:20 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac000000150a010300000000000000000a000006380008004e31eb2ef0d33db6798668f670e58808b7b78d92d96f6653ca6ffa4840986be885693879004a4b1e3a57d0e264a12177ac31d34a0900010073797a31000000000c0006400000000000000002080003400000000a080003400000000a1e0008007a78e4bef4619351016ef0eaffa99f340cd06aa4fc257c01ec4f00000c00064000000000000000050900020073797a3000000000e43579b15facd55a6f1b44186525f36b7cd3445c9849999fe61d6c5124c98d6c2890450ae5e3112c44eadf6d"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x2404c801) (async) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x64, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}}, 0x20000001) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5aa}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:20 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:20 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:20 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:20 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) io_uring_setup(0x445b, &(0x7f0000000000)={0x0, 0x1f5c, 0x2, 0x3, 0x2b3}) io_uring_setup(0x698c, &(0x7f0000000080)={0x0, 0xc8f6, 0x8, 0x2, 0x1c}) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f0000000280)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000000240)=""/9, 0x9}], 0x3, &(0x7f00000002c0)=[{0x20, 0x0, 0x0, ""/9}], 0x20}, 0x38, 0x40000100) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0xa0a9513bb2fa6a33, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r3, 0x22, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6b}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4004094) 02:29:20 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xcef}]}, 0x2c}}, 0x8000) 02:29:20 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0xffffffffffffff1b, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0, 0x45}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x20000840}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8000}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xff}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4004821) 02:29:20 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) io_uring_setup(0x445b, &(0x7f0000000000)={0x0, 0x1f5c, 0x2, 0x3, 0x2b3}) (async) io_uring_setup(0x698c, &(0x7f0000000080)={0x0, 0xc8f6, 0x8, 0x2, 0x1c}) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) (async) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f0000000280)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000000240)=""/9, 0x9}], 0x3, &(0x7f00000002c0)=[{0x20, 0x0, 0x0, ""/9}], 0x20}, 0x38, 0x40000100) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0xa0a9513bb2fa6a33, 0x0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r3, 0x22, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6b}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4004094) 02:29:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x8000) 02:29:20 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:20 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:20 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0xffffffffffffff1b, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0, 0x45}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x20000840}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8000}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xff}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4004821) socket$qrtr(0x2a, 0x2, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0xffffffffffffff1b, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0, 0x45}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x20000840}, 0x38) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8000}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xff}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4004821) (async) 02:29:20 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x8000) 02:29:20 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) io_uring_setup(0x445b, &(0x7f0000000000)={0x0, 0x1f5c, 0x2, 0x3, 0x2b3}) io_uring_setup(0x698c, &(0x7f0000000080)={0x0, 0xc8f6, 0x8, 0x2, 0x1c}) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f0000000280)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000000240)=""/9, 0x9}], 0x3, &(0x7f00000002c0)=[{0x20, 0x0, 0x0, ""/9}], 0x20}, 0x38, 0x40000100) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0xa0a9513bb2fa6a33, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r3, 0x22, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6b}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4004094) socket$qrtr(0x2a, 0x2, 0x0) (async) io_uring_setup(0x445b, &(0x7f0000000000)={0x0, 0x1f5c, 0x2, 0x3, 0x2b3}) (async) io_uring_setup(0x698c, &(0x7f0000000080)={0x0, 0xc8f6, 0x8, 0x2, 0x1c}) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) (async) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f0000000280)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000000240)=""/9, 0x9}], 0x3, &(0x7f00000002c0)=[{0x20, 0x0, 0x0, ""/9}], 0x20}, 0x38, 0x40000100) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0xa0a9513bb2fa6a33, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r3, 0x22, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6b}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4004094) (async) 02:29:20 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x8000) 02:29:20 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0xffffffffffffff1b, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0, 0x45}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x20000840}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8000}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xff}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4004821) socket$qrtr(0x2a, 0x2, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0xffffffffffffff1b, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0, 0x45}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x20000840}, 0x38) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8000}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xff}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4004821) (async) 02:29:20 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) 02:29:20 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:20 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2e}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1a, 0x2014}}) 02:29:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xcef}]}, 0x2c}}, 0x8000) 02:29:20 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:20 executing program 5: socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000480)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x80800) syz_io_uring_setup(0x28da, &(0x7f0000000340)={0x0, 0x9ae0, 0x40, 0x0, 0x3b0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x1}, 0x5) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="f94f9c804e298bb0e51827978e5cf427e1759e4036b976763588554808062a8881cc038f6654e96db72099220af184b38cc53ff7a7dc04136fba20b69bfb32c73e2ad58af0ea77a142bc1584c2ee98662a951f71bc4374639efce77e5a46e86c39"}, {&(0x7f0000000080)="8bce4f70751cf714f561c9991ac7a417b31b0c97c4349999b46108d664d492e254816e2bebf4c3e6a9c856d9a32dcfe5ee12f439e64688"}, {&(0x7f00000000c0)="f7bc9402b02d10c6d2daaa3994ad9a6553622b209ec9495c35c6382c290c0c4c2b433b5aa4b8b0e9f15cf35ea62bf6d6e8f49a2d63c24bd34cedd2fe710b509f47f0c34251291ca6426280aa896e79557ac317520fbc939c2c8a524ed65944856f151c30ec1c8087be156d124e0f9d95f2edd7e175af8f328089574bf65596857c6272c702d81ddb3384af1adc60b9301f36a8e8bbc427fba1"}, {&(0x7f0000000180)="887cfa2949c39ae2c11bcd5e97b2e1a029401204a7e72339d8a42d330d5f3882d66b9b226779"}, {&(0x7f00000001c0)="bd62f9fa8f36c7a20b178377b2276d1fd2eef1daff3715aae05ffcc04b7796fc4ee102102b8df1365a91c179a7960149db8f23a1447ae88267a24b04d1da17f0c23c13b5cee9754b414e7b108a31377b261b2d6b7bc27e9e1bad234e0c7cb423350540f4f86cb39f9e3f1f4f660dd75406abf398d4e4b8554f184566b94ce299da5aa23b0ba3006d4fca1503cbe323fe19206351f5150ea3be4b9ab8617a2ae883489eba8bfd899b20873afa6992280cb0dee5ff7cc3f8015ee912c419ff789cf3757596576db43e1d8e6ad245bd3d471c80e994a50a2c68683f6cc9a0d4da3e3bfacff7f6"}], 0x10000000000000c8, 0x0, 0xffffffffffffff43}, 0xfffffffffffffece) 02:29:20 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) 02:29:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000) 02:29:20 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2e}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1a, 0x2014}}) 02:29:20 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000) 02:29:20 executing program 5: socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000480)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x80800) syz_io_uring_setup(0x28da, &(0x7f0000000340)={0x0, 0x9ae0, 0x40, 0x0, 0x3b0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x1}, 0x5) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="f94f9c804e298bb0e51827978e5cf427e1759e4036b976763588554808062a8881cc038f6654e96db72099220af184b38cc53ff7a7dc04136fba20b69bfb32c73e2ad58af0ea77a142bc1584c2ee98662a951f71bc4374639efce77e5a46e86c39"}, {&(0x7f0000000080)="8bce4f70751cf714f561c9991ac7a417b31b0c97c4349999b46108d664d492e254816e2bebf4c3e6a9c856d9a32dcfe5ee12f439e64688"}, {&(0x7f00000000c0)="f7bc9402b02d10c6d2daaa3994ad9a6553622b209ec9495c35c6382c290c0c4c2b433b5aa4b8b0e9f15cf35ea62bf6d6e8f49a2d63c24bd34cedd2fe710b509f47f0c34251291ca6426280aa896e79557ac317520fbc939c2c8a524ed65944856f151c30ec1c8087be156d124e0f9d95f2edd7e175af8f328089574bf65596857c6272c702d81ddb3384af1adc60b9301f36a8e8bbc427fba1"}, {&(0x7f0000000180)="887cfa2949c39ae2c11bcd5e97b2e1a029401204a7e72339d8a42d330d5f3882d66b9b226779"}, {&(0x7f00000001c0)="bd62f9fa8f36c7a20b178377b2276d1fd2eef1daff3715aae05ffcc04b7796fc4ee102102b8df1365a91c179a7960149db8f23a1447ae88267a24b04d1da17f0c23c13b5cee9754b414e7b108a31377b261b2d6b7bc27e9e1bad234e0c7cb423350540f4f86cb39f9e3f1f4f660dd75406abf398d4e4b8554f184566b94ce299da5aa23b0ba3006d4fca1503cbe323fe19206351f5150ea3be4b9ab8617a2ae883489eba8bfd899b20873afa6992280cb0dee5ff7cc3f8015ee912c419ff789cf3757596576db43e1d8e6ad245bd3d471c80e994a50a2c68683f6cc9a0d4da3e3bfacff7f6"}], 0x10000000000000c8, 0x0, 0xffffffffffffff43}, 0xfffffffffffffece) socket$qrtr(0x2a, 0x2, 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) (async) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) (async) accept4$vsock_stream(r1, &(0x7f0000000480)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x80800) (async) syz_io_uring_setup(0x28da, &(0x7f0000000340)={0x0, 0x9ae0, 0x40, 0x0, 0x3b0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x1}, 0x5) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="f94f9c804e298bb0e51827978e5cf427e1759e4036b976763588554808062a8881cc038f6654e96db72099220af184b38cc53ff7a7dc04136fba20b69bfb32c73e2ad58af0ea77a142bc1584c2ee98662a951f71bc4374639efce77e5a46e86c39"}, {&(0x7f0000000080)="8bce4f70751cf714f561c9991ac7a417b31b0c97c4349999b46108d664d492e254816e2bebf4c3e6a9c856d9a32dcfe5ee12f439e64688"}, {&(0x7f00000000c0)="f7bc9402b02d10c6d2daaa3994ad9a6553622b209ec9495c35c6382c290c0c4c2b433b5aa4b8b0e9f15cf35ea62bf6d6e8f49a2d63c24bd34cedd2fe710b509f47f0c34251291ca6426280aa896e79557ac317520fbc939c2c8a524ed65944856f151c30ec1c8087be156d124e0f9d95f2edd7e175af8f328089574bf65596857c6272c702d81ddb3384af1adc60b9301f36a8e8bbc427fba1"}, {&(0x7f0000000180)="887cfa2949c39ae2c11bcd5e97b2e1a029401204a7e72339d8a42d330d5f3882d66b9b226779"}, {&(0x7f00000001c0)="bd62f9fa8f36c7a20b178377b2276d1fd2eef1daff3715aae05ffcc04b7796fc4ee102102b8df1365a91c179a7960149db8f23a1447ae88267a24b04d1da17f0c23c13b5cee9754b414e7b108a31377b261b2d6b7bc27e9e1bad234e0c7cb423350540f4f86cb39f9e3f1f4f660dd75406abf398d4e4b8554f184566b94ce299da5aa23b0ba3006d4fca1503cbe323fe19206351f5150ea3be4b9ab8617a2ae883489eba8bfd899b20873afa6992280cb0dee5ff7cc3f8015ee912c419ff789cf3757596576db43e1d8e6ad245bd3d471c80e994a50a2c68683f6cc9a0d4da3e3bfacff7f6"}], 0x10000000000000c8, 0x0, 0xffffffffffffff43}, 0xfffffffffffffece) (async) 02:29:20 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) 02:29:20 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2e}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1a, 0x2014}}) 02:29:20 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000) 02:29:20 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:20 executing program 5: socket$qrtr(0x2a, 0x2, 0x0) (async) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) (async) accept4$vsock_stream(r1, &(0x7f0000000480)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x80800) (async) syz_io_uring_setup(0x28da, &(0x7f0000000340)={0x0, 0x9ae0, 0x40, 0x0, 0x3b0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x1}, 0x5) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="f94f9c804e298bb0e51827978e5cf427e1759e4036b976763588554808062a8881cc038f6654e96db72099220af184b38cc53ff7a7dc04136fba20b69bfb32c73e2ad58af0ea77a142bc1584c2ee98662a951f71bc4374639efce77e5a46e86c39"}, {&(0x7f0000000080)="8bce4f70751cf714f561c9991ac7a417b31b0c97c4349999b46108d664d492e254816e2bebf4c3e6a9c856d9a32dcfe5ee12f439e64688"}, {&(0x7f00000000c0)="f7bc9402b02d10c6d2daaa3994ad9a6553622b209ec9495c35c6382c290c0c4c2b433b5aa4b8b0e9f15cf35ea62bf6d6e8f49a2d63c24bd34cedd2fe710b509f47f0c34251291ca6426280aa896e79557ac317520fbc939c2c8a524ed65944856f151c30ec1c8087be156d124e0f9d95f2edd7e175af8f328089574bf65596857c6272c702d81ddb3384af1adc60b9301f36a8e8bbc427fba1"}, {&(0x7f0000000180)="887cfa2949c39ae2c11bcd5e97b2e1a029401204a7e72339d8a42d330d5f3882d66b9b226779"}, {&(0x7f00000001c0)="bd62f9fa8f36c7a20b178377b2276d1fd2eef1daff3715aae05ffcc04b7796fc4ee102102b8df1365a91c179a7960149db8f23a1447ae88267a24b04d1da17f0c23c13b5cee9754b414e7b108a31377b261b2d6b7bc27e9e1bad234e0c7cb423350540f4f86cb39f9e3f1f4f660dd75406abf398d4e4b8554f184566b94ce299da5aa23b0ba3006d4fca1503cbe323fe19206351f5150ea3be4b9ab8617a2ae883489eba8bfd899b20873afa6992280cb0dee5ff7cc3f8015ee912c419ff789cf3757596576db43e1d8e6ad245bd3d471c80e994a50a2c68683f6cc9a0d4da3e3bfacff7f6"}], 0x10000000000000c8, 0x0, 0xffffffffffffff43}, 0xfffffffffffffece) 02:29:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x4004) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x810) r1 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r2) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x15, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc}, 0x20004880) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x1a200, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$qrtr(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:20 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) 02:29:20 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) recvmsg$qrtr(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)=[{&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000000080)=""/98, 0x62}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/63, 0x3f}], 0x5, &(0x7f0000000200)=[{0x88, 0x0, 0x0, ""/117}, {0x10}], 0x98, 0x1}, 0x38, 0x2) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:20 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) 02:29:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x4004) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x810) r1 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r2) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x15, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc}, 0x20004880) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x1a200, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$qrtr(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x4004) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x810) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r2) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x15, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc}, 0x20004880) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x1a200, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$qrtr(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) 02:29:20 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) recvmsg$qrtr(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)=[{&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000000080)=""/98, 0x62}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/63, 0x3f}], 0x5, &(0x7f0000000200)=[{0x88, 0x0, 0x0, ""/117}, {0x10}], 0x98, 0x1}, 0x38, 0x2) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) socket$qrtr(0x2a, 0x2, 0x0) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) recvmsg$qrtr(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)=[{&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000000080)=""/98, 0x62}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/63, 0x3f}], 0x5, &(0x7f0000000200)=[{0x88, 0x0, 0x0, ""/117}, {0x10}], 0x98, 0x1}, 0x38, 0x2) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) 02:29:20 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) 02:29:20 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x4004) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x810) (rerun: 32) r1 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r2) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x15, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc}, 0x20004880) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x1a200, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$qrtr(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:20 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x0, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xcef}]}, 0x2c}}, 0x8000) 02:29:20 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) recvmsg$qrtr(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)=[{&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000000080)=""/98, 0x62}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/63, 0x3f}], 0x5, &(0x7f0000000200)=[{0x88, 0x0, 0x0, ""/117}, {0x10}], 0x98, 0x1}, 0x38, 0x2) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:20 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:20 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:20 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:20 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x5f, &(0x7f0000000080)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x0, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xcef}]}, 0x2c}}, 0x8000) 02:29:20 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x5f, &(0x7f0000000080)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x0, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xcef}]}, 0x2c}}, 0x8000) 02:29:20 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:20 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xcef}]}, 0x2c}}, 0x8000) 02:29:20 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x5f, &(0x7f0000000080)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:20 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:20 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:20 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:20 executing program 1: syz_extract_tcp_res(&(0x7f0000000000), 0x9, 0x3ff) r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xcef}]}, 0x2c}}, 0x8000) 02:29:20 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:20 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}}, 0x8000) 02:29:20 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 1: syz_extract_tcp_res(&(0x7f0000000000), 0x9, 0x3ff) (async) r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:21 executing program 5: socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) sendmsg$qrtr(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x1c, 0x0, 0x0, 0x488d4}, 0x38) 02:29:21 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x8000) 02:29:21 executing program 5: socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) (async, rerun: 32) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (rerun: 32) sendmsg$qrtr(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x1c, 0x0, 0x0, 0x488d4}, 0x38) 02:29:21 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 1: syz_extract_tcp_res(&(0x7f0000000000), 0x9, 0x3ff) r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) syz_extract_tcp_res(&(0x7f0000000000), 0x9, 0x3ff) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) 02:29:21 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x8000) 02:29:21 executing program 5: socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) sendmsg$qrtr(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x1c, 0x0, 0x0, 0x488d4}, 0x38) 02:29:21 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 02:29:21 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 5: semctl$GETNCNT(0xffffffffffffffff, 0x3, 0xe, &(0x7f0000000000)=""/35) r0 = socket$qrtr(0x2a, 0x2, 0x0) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) r1 = semget(0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x1f}, @broadcast, 0x11, 0x2}}) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x8000) 02:29:21 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 02:29:21 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5}]}, 0x24}}, 0x8000) 02:29:21 executing program 5: semctl$GETNCNT(0xffffffffffffffff, 0x3, 0xe, &(0x7f0000000000)=""/35) r0 = socket$qrtr(0x2a, 0x2, 0x0) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) r1 = semget(0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x1f}, @broadcast, 0x11, 0x2}}) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) semctl$GETNCNT(0xffffffffffffffff, 0x3, 0xe, &(0x7f0000000000)=""/35) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) (async) semget(0x3, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x1f}, @broadcast, 0x11, 0x2}}) (async) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) (async) semctl$IPC_RMID(r1, 0x0, 0x0) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) 02:29:21 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() syz_io_uring_complete(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) socket$qrtr(0x2a, 0x2, 0x0) (async) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 02:29:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5}]}, 0x24}}, 0x8000) 02:29:21 executing program 5: semctl$GETNCNT(0xffffffffffffffff, 0x3, 0xe, &(0x7f0000000000)=""/35) r0 = socket$qrtr(0x2a, 0x2, 0x0) (async) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) (async) r1 = semget(0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x1f}, @broadcast, 0x11, 0x2}}) (async) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:21 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0xffc}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x80) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) recvmsg$qrtr(r1, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)=[{&(0x7f0000000140)=""/63, 0x3f}, {&(0x7f0000000180)=""/198, 0xc6}], 0x2, 0x0, 0x0, 0x20}, 0x38, 0x0) r2 = syz_io_uring_complete(0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000380)={&(0x7f0000000300), 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x14c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3f}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x83e4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_NAT_DST={0x60, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1e}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x7}}]}, @CTA_ID={0x8}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004001}, 0x800) 02:29:21 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:21 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) getsockname$qrtr(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_DELTABLE={0x114, 0x2, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xa1, 0x6, "c71cb56ad7e52c66b3a48f2c69091ba4215bfe3bd7601b799c7d15dae1147a49015f57eb627ed064bc0edc63706c3beb8ef34de1c9f377327e92c12f4e3e4ac764bc7cdbf990f399ae4222fa6d79aa9c98bff143a1cc3b3755f2ac357896688a301fdc1a80b05c6b63a8e9d4e207dda69545c1bb36c1baa094b673d2eb5bfd6b3c5f5fd268541a26ec7b9d408cfd1c0ea1c438622ddde9ced6e67813f8"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x6c5353d0}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0x1d4}, 0x1, 0x0, 0x0, 0x1}, 0x880) r2 = syz_io_uring_complete(0x0) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) 02:29:21 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() syz_io_uring_complete(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5}]}, 0x24}}, 0x8000) 02:29:21 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0xffc}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x80) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) recvmsg$qrtr(r1, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)=[{&(0x7f0000000140)=""/63, 0x3f}, {&(0x7f0000000180)=""/198, 0xc6}], 0x2, 0x0, 0x0, 0x20}, 0x38, 0x0) r2 = syz_io_uring_complete(0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000380)={&(0x7f0000000300), 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x14c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3f}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x83e4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_NAT_DST={0x60, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1e}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x7}}]}, @CTA_ID={0x8}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004001}, 0x800) 02:29:21 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x8000) 02:29:21 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) getsockname$qrtr(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_DELTABLE={0x114, 0x2, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xa1, 0x6, "c71cb56ad7e52c66b3a48f2c69091ba4215bfe3bd7601b799c7d15dae1147a49015f57eb627ed064bc0edc63706c3beb8ef34de1c9f377327e92c12f4e3e4ac764bc7cdbf990f399ae4222fa6d79aa9c98bff143a1cc3b3755f2ac357896688a301fdc1a80b05c6b63a8e9d4e207dda69545c1bb36c1baa094b673d2eb5bfd6b3c5f5fd268541a26ec7b9d408cfd1c0ea1c438622ddde9ced6e67813f8"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x6c5353d0}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0x1d4}, 0x1, 0x0, 0x0, 0x1}, 0x880) r2 = syz_io_uring_complete(0x0) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) socket$qrtr(0x2a, 0x2, 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) getsockname$qrtr(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_DELTABLE={0x114, 0x2, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xa1, 0x6, "c71cb56ad7e52c66b3a48f2c69091ba4215bfe3bd7601b799c7d15dae1147a49015f57eb627ed064bc0edc63706c3beb8ef34de1c9f377327e92c12f4e3e4ac764bc7cdbf990f399ae4222fa6d79aa9c98bff143a1cc3b3755f2ac357896688a301fdc1a80b05c6b63a8e9d4e207dda69545c1bb36c1baa094b673d2eb5bfd6b3c5f5fd268541a26ec7b9d408cfd1c0ea1c438622ddde9ced6e67813f8"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x6c5353d0}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0x1d4}, 0x1, 0x0, 0x0, 0x1}, 0x880) (async) syz_io_uring_complete(0x0) (async) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) 02:29:21 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x8000) 02:29:21 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() syz_io_uring_complete(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0xffc}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x80) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) recvmsg$qrtr(r1, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)=[{&(0x7f0000000140)=""/63, 0x3f}, {&(0x7f0000000180)=""/198, 0xc6}], 0x2, 0x0, 0x0, 0x20}, 0x38, 0x0) r2 = syz_io_uring_complete(0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000380)={&(0x7f0000000300), 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x14c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3f}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x83e4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_NAT_DST={0x60, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1e}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x7}}]}, @CTA_ID={0x8}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004001}, 0x800) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0xffc}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x80) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) recvmsg$qrtr(r1, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)=[{&(0x7f0000000140)=""/63, 0x3f}, {&(0x7f0000000180)=""/198, 0xc6}], 0x2, 0x0, 0x0, 0x20}, 0x38, 0x0) (async) syz_io_uring_complete(0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000380)={&(0x7f0000000300), 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x14c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3f}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x83e4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_NAT_DST={0x60, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1e}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x7}}]}, @CTA_ID={0x8}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004001}, 0x800) (async) 02:29:21 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() syz_io_uring_complete(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:21 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) getsockname$qrtr(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_DELTABLE={0x114, 0x2, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xa1, 0x6, "c71cb56ad7e52c66b3a48f2c69091ba4215bfe3bd7601b799c7d15dae1147a49015f57eb627ed064bc0edc63706c3beb8ef34de1c9f377327e92c12f4e3e4ac764bc7cdbf990f399ae4222fa6d79aa9c98bff143a1cc3b3755f2ac357896688a301fdc1a80b05c6b63a8e9d4e207dda69545c1bb36c1baa094b673d2eb5bfd6b3c5f5fd268541a26ec7b9d408cfd1c0ea1c438622ddde9ced6e67813f8"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x6c5353d0}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0x1d4}, 0x1, 0x0, 0x0, 0x1}, 0x880) r2 = syz_io_uring_complete(0x0) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020208000000000000000000030000020600074000010000080005400000a591bcdb8a1a6a2300071800028006000340000400000c000280050001003a00000008000540000000030800054000000044f8aafa8fbd7b03de24b8c8c6c5dfff0489777edd02282ccf1c93d9ee22db0a9654d6c78a1a3c0e948647af50b4d3558c3029e65108033ce133029eea8a2c03f2f4f22209e67df7bb37d43a7c356a49c6fe893f31836c244ccd3c912018785ee154928fed69504e15cdf1978df5448b509c8effb612b6dbd368f8782c049cd2cd1501f45884db7ee343ffd44c877a1fd1ca5161cf893ca0f7ecb8d4abd98805cd2215546fee711433787ae39a607d89258b737d0c70a28c7e2344b8824f18e6c6483685d25cd5fd2ae58aade9f5c44c51ca3bdd369e95f6240e68892de7c37335d87343e2a88a942de373fa6ffdabea8aea0643707b4eea220a94664b236a033d985da4cfb9c4338e100f198f29053a729042e0d844c4565437c4f7a224b18b758015c7f885fa9957974609a238feb0984d1fc04905ed2637caa154b07290150475cfc8ac2b0ce2bb7c"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) socket$qrtr(0x2a, 0x2, 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xf0ffffff7f0000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) getsockname$qrtr(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_DELTABLE={0x114, 0x2, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xa1, 0x6, "c71cb56ad7e52c66b3a48f2c69091ba4215bfe3bd7601b799c7d15dae1147a49015f57eb627ed064bc0edc63706c3beb8ef34de1c9f377327e92c12f4e3e4ac764bc7cdbf990f399ae4222fa6d79aa9c98bff143a1cc3b3755f2ac357896688a301fdc1a80b05c6b63a8e9d4e207dda69545c1bb36c1baa094b673d2eb5bfd6b3c5f5fd268541a26ec7b9d408cfd1c0ea1c438622ddde9ced6e67813f8"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x6c5353d0}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0x1d4}, 0x1, 0x0, 0x0, 0x1}, 0x880) (async) syz_io_uring_complete(0x0) (async) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) 02:29:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x8000) 02:29:21 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}}, 0x8000) 02:29:21 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) getsockname$qrtr(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) 02:29:21 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() syz_io_uring_complete(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:21 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_complete(0x0) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x8000) 02:29:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}}, 0x0) 02:29:21 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) getsockname$qrtr(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) 02:29:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x8000) 02:29:21 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_complete(0x0) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x8000) 02:29:21 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() syz_io_uring_complete(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:21 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) getsockname$qrtr(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) (async) getsockname$qrtr(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) 02:29:21 executing program 5: sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x8000) 02:29:21 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_complete(0x0) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 5: sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x8000) 02:29:21 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:21 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) r1 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) 02:29:21 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 5: sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x8000) 02:29:21 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) 02:29:21 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x8000) 02:29:21 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) r1 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) getsockname$qrtr(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) 02:29:21 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:21 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:21 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:21 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:21 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x8000) 02:29:21 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x8000) 02:29:22 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:22 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:22 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:22 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) 02:29:22 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:22 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x8000) 02:29:22 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:22 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) 02:29:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x8000) 02:29:22 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:22 executing program 1: ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x2, 0x7ffc}, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:22 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x8000) 02:29:22 executing program 1: ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) (async) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x2, 0x7ffc}, 0xc) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) (async) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:22 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:22 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) sync() 02:29:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000) 02:29:22 executing program 1: ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x2, 0x7ffc}, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) (async) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:22 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:22 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000) 02:29:22 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000) 02:29:22 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:22 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() 02:29:22 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:22 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:22 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:22 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:22 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) 02:29:22 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_complete(0x0) sync() 02:29:22 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r6) syz_io_uring_submit(r6, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:22 executing program 1: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)}, 0x38) 02:29:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) 02:29:22 executing program 1: socket$qrtr(0x2a, 0x2, 0x0) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)}, 0x38) 02:29:22 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_complete(0x0) sync() 02:29:22 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r6) syz_io_uring_submit(r6, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) 02:29:22 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:22 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x8000) 02:29:22 executing program 1: socket$qrtr(0x2a, 0x2, 0x0) (async) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)}, 0x38) 02:29:22 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) socket$nl_generic(0x10, 0x3, 0x10) sync() 02:29:22 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x8000) 02:29:22 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r6) syz_io_uring_submit(r6, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:22 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r6) syz_io_uring_submit(r6, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) 02:29:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x8000) 02:29:22 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) sync() 02:29:22 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:22 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f00000009c0)={&(0x7f0000000100)={0x2a, 0x2306b02d680b725e, 0x1}, 0xc, &(0x7f0000000540)=[{&(0x7f0000000140)="a3473fe7e0849c6cfd1dfb2fc12f5b69beb2ee6b6d68fc5febdc", 0x1a}, {&(0x7f0000000180)="d952d5632931b25dc7b51820b33188d75e2852cbc1fafd48cf24be9b1ccf9a27c6dd156f9d91b71892ff8288f61810d62895a350bbdbb7b4b397151d12e16d6b969c233d23a07fdc0f72fd25bda19b16614f2086143b367223aea194d7ee1d8313c5233e4a901ce262e8b0292db73746f549f3407268f307e98e9e2462d5d92ed19db06614e96e2da61c85400a686136358fa1b737bcb1c26db29af6f1fcc15b8221ab1e4dec9969b9d102e62083b9fd220bbe98b25c20493230217c8889", 0xbe}, {&(0x7f0000000240)="0c82685e42289f23a086200edf40a6cbf04ba845512a26bfac81a1012a2782784c4d3cafa77bcbb33874e25d3b36fcfcb8db920536e24ae3594af1de9f59f854913673647222a8af66763e7b", 0x4c}, {&(0x7f00000002c0)="1349d3b2f2bd985256b41f3d6508e0452424d10db1ecc2007cf0f821fd5d177d0ddd21d2e018980fb8dbc57077168b013f43f13a4c614bd0832bd7", 0x3b}, {&(0x7f0000000300)="1a4949ac3719d1f3545942350003a6633b7d1afacbb0af49d4bf7cf6a5516b98dafc3a60116cea2256586446139a3a42cae06adc411141688cb23256dcc1f767a221f7e9f5d1f7f90cf24204719d4cc4b71b4fb9bbfffc551a0313529b492a85214c817307786ae300b4cffb8fa1f1f5f4ddecda8fc9421204c9f4979c93536363999fc29950915fc407030436ac84b872058da3d5698599739055051fec88e6e85deae55b3b6d90a58a4668ca0832c69f21c9a24ac0a8ff6b223604da90d4ed841e21b457", 0xc5}, {&(0x7f0000000400)="2babc3c341ba3a3028", 0x9}, {&(0x7f0000000440)="daaf4575227bb0b120e149743b4e91707275b86f54efc287492d57a4263efb28816812c8f91dac25d9e36ca7d8ba5ca901a328b7cfb4cde216b430bd83f49c1f0f604a84501c0f5a56b3352f3a99a56cc68daaad92a3e33b92c22005bfa0d94fd0affea13ae857e7ce0ab24b19f2760d2dfcecf81d404a4873efa365d339bd1a26197276d51c643f292f3ee7db196a6f40cf3b32c83eb1b5e7723748083411a4b2520886c6639c8025bd59293cea27df1a02313619ee5792bcfe682c9234364f29ae3aff8d6b2489444015e5efa8942e5a0c25375ce042effb10e84a416a7f9504a92806fa5e5c484eea8cebc3c22d873b", 0xf1}, {&(0x7f00000006c0)="489d535780621a2a1ad12aa41db622a3a84e4b4ae450997ad7f300d3991f006f9be1283253210c70f7b49adfad221c333a08273769a6688da123f6d6bb879ff413dc77f617b882c5a02c4c921c66164b5f7e1a4321924435f8973d6fd2011ee3d6a6d02e97bbbb15755fbe777a777a6dad0e94dc5d901f3783cd7efb22b0c797b1f3c41c5746203e4c58366747795d38c8a06c211dccb4bdaf1de5f534f70cc7d017526442d0927964f514361ff0190ff244355607520b1144439523119c745fdf2baab01a60002309", 0xc9}], 0x8, &(0x7f00000007c0)=[{0x60, 0x10a, 0xac8, "891d2c2120a747f2cf7096269105cd003e614f2e57613f3a6f32de3826960a96c3de860d6e8d29bac95aecea40e081c9b09cbc507e0e21923d35efebd3c57dc4b993c4f4ae16e7abac5382f76808"}, {0xd0, 0x2b1, 0x5, "8071f2409c6d08ae6ac6409664860a1649e05187eba607e3c1e1a372976f42f623425cfd5bc26c448088181f1776405e8758f10fe130f76306d030ec32e6cf5c7096dd09b43445757ef5ff643479c0b45e199e00c4eef9f9a801380b70302dec958383d54d8938b24b3df4567f7b5de3df72a8187700cd130a62dbc3ca9dabb2d580c7182758cbb21e9265d3103eaf48361279bacdab19167fb3f464dd5388fe3395b824f71a3a450ca4444693977c63560f9ac56479e0e66bada21f698a"}, {0x50, 0x107, 0x0, "a86790d816f5538c574980aa446a1c6bf08fb6bf81b52810ead0f2ee540057b2fb08bc732eaea353cf3597c20c4ef7b41393f1e26156145442e0e2580726"}, {0x38, 0x104, 0x7, "1ac9c0dccc8731cadcf1013db32dcfa869a160b3a116c0d80e66ff59953b189142"}, {0x28, 0x103, 0xaa95, "2287b9ac121b5127acfee67d53096621d884"}], 0x1e0, 0x1}, 0x38) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)={'raw\x00', 0x0, [0x2, 0x401, 0xfff, 0x9, 0x8]}, &(0x7f0000000080)=0x54) 02:29:22 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r6) syz_io_uring_submit(r6, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) 02:29:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1, 0x4, 0x301}, 0x14}}, 0x8000) 02:29:22 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:22 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f00000009c0)={&(0x7f0000000100)={0x2a, 0x2306b02d680b725e, 0x1}, 0xc, &(0x7f0000000540)=[{&(0x7f0000000140)="a3473fe7e0849c6cfd1dfb2fc12f5b69beb2ee6b6d68fc5febdc", 0x1a}, {&(0x7f0000000180)="d952d5632931b25dc7b51820b33188d75e2852cbc1fafd48cf24be9b1ccf9a27c6dd156f9d91b71892ff8288f61810d62895a350bbdbb7b4b397151d12e16d6b969c233d23a07fdc0f72fd25bda19b16614f2086143b367223aea194d7ee1d8313c5233e4a901ce262e8b0292db73746f549f3407268f307e98e9e2462d5d92ed19db06614e96e2da61c85400a686136358fa1b737bcb1c26db29af6f1fcc15b8221ab1e4dec9969b9d102e62083b9fd220bbe98b25c20493230217c8889", 0xbe}, {&(0x7f0000000240)="0c82685e42289f23a086200edf40a6cbf04ba845512a26bfac81a1012a2782784c4d3cafa77bcbb33874e25d3b36fcfcb8db920536e24ae3594af1de9f59f854913673647222a8af66763e7b", 0x4c}, {&(0x7f00000002c0)="1349d3b2f2bd985256b41f3d6508e0452424d10db1ecc2007cf0f821fd5d177d0ddd21d2e018980fb8dbc57077168b013f43f13a4c614bd0832bd7", 0x3b}, {&(0x7f0000000300)="1a4949ac3719d1f3545942350003a6633b7d1afacbb0af49d4bf7cf6a5516b98dafc3a60116cea2256586446139a3a42cae06adc411141688cb23256dcc1f767a221f7e9f5d1f7f90cf24204719d4cc4b71b4fb9bbfffc551a0313529b492a85214c817307786ae300b4cffb8fa1f1f5f4ddecda8fc9421204c9f4979c93536363999fc29950915fc407030436ac84b872058da3d5698599739055051fec88e6e85deae55b3b6d90a58a4668ca0832c69f21c9a24ac0a8ff6b223604da90d4ed841e21b457", 0xc5}, {&(0x7f0000000400)="2babc3c341ba3a3028", 0x9}, {&(0x7f0000000440)="daaf4575227bb0b120e149743b4e91707275b86f54efc287492d57a4263efb28816812c8f91dac25d9e36ca7d8ba5ca901a328b7cfb4cde216b430bd83f49c1f0f604a84501c0f5a56b3352f3a99a56cc68daaad92a3e33b92c22005bfa0d94fd0affea13ae857e7ce0ab24b19f2760d2dfcecf81d404a4873efa365d339bd1a26197276d51c643f292f3ee7db196a6f40cf3b32c83eb1b5e7723748083411a4b2520886c6639c8025bd59293cea27df1a02313619ee5792bcfe682c9234364f29ae3aff8d6b2489444015e5efa8942e5a0c25375ce042effb10e84a416a7f9504a92806fa5e5c484eea8cebc3c22d873b", 0xf1}, {&(0x7f00000006c0)="489d535780621a2a1ad12aa41db622a3a84e4b4ae450997ad7f300d3991f006f9be1283253210c70f7b49adfad221c333a08273769a6688da123f6d6bb879ff413dc77f617b882c5a02c4c921c66164b5f7e1a4321924435f8973d6fd2011ee3d6a6d02e97bbbb15755fbe777a777a6dad0e94dc5d901f3783cd7efb22b0c797b1f3c41c5746203e4c58366747795d38c8a06c211dccb4bdaf1de5f534f70cc7d017526442d0927964f514361ff0190ff244355607520b1144439523119c745fdf2baab01a60002309", 0xc9}], 0x8, &(0x7f00000007c0)=[{0x60, 0x10a, 0xac8, "891d2c2120a747f2cf7096269105cd003e614f2e57613f3a6f32de3826960a96c3de860d6e8d29bac95aecea40e081c9b09cbc507e0e21923d35efebd3c57dc4b993c4f4ae16e7abac5382f76808"}, {0xd0, 0x2b1, 0x5, "8071f2409c6d08ae6ac6409664860a1649e05187eba607e3c1e1a372976f42f623425cfd5bc26c448088181f1776405e8758f10fe130f76306d030ec32e6cf5c7096dd09b43445757ef5ff643479c0b45e199e00c4eef9f9a801380b70302dec958383d54d8938b24b3df4567f7b5de3df72a8187700cd130a62dbc3ca9dabb2d580c7182758cbb21e9265d3103eaf48361279bacdab19167fb3f464dd5388fe3395b824f71a3a450ca4444693977c63560f9ac56479e0e66bada21f698a"}, {0x50, 0x107, 0x0, "a86790d816f5538c574980aa446a1c6bf08fb6bf81b52810ead0f2ee540057b2fb08bc732eaea353cf3597c20c4ef7b41393f1e26156145442e0e2580726"}, {0x38, 0x104, 0x7, "1ac9c0dccc8731cadcf1013db32dcfa869a160b3a116c0d80e66ff59953b189142"}, {0x28, 0x103, 0xaa95, "2287b9ac121b5127acfee67d53096621d884"}], 0x1e0, 0x1}, 0x38) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)={'raw\x00', 0x0, [0x2, 0x401, 0xfff, 0x9, 0x8]}, &(0x7f0000000080)=0x54) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$qrtr(r0, &(0x7f00000009c0)={&(0x7f0000000100)={0x2a, 0x2306b02d680b725e, 0x1}, 0xc, &(0x7f0000000540)=[{&(0x7f0000000140)="a3473fe7e0849c6cfd1dfb2fc12f5b69beb2ee6b6d68fc5febdc", 0x1a}, {&(0x7f0000000180)="d952d5632931b25dc7b51820b33188d75e2852cbc1fafd48cf24be9b1ccf9a27c6dd156f9d91b71892ff8288f61810d62895a350bbdbb7b4b397151d12e16d6b969c233d23a07fdc0f72fd25bda19b16614f2086143b367223aea194d7ee1d8313c5233e4a901ce262e8b0292db73746f549f3407268f307e98e9e2462d5d92ed19db06614e96e2da61c85400a686136358fa1b737bcb1c26db29af6f1fcc15b8221ab1e4dec9969b9d102e62083b9fd220bbe98b25c20493230217c8889", 0xbe}, {&(0x7f0000000240)="0c82685e42289f23a086200edf40a6cbf04ba845512a26bfac81a1012a2782784c4d3cafa77bcbb33874e25d3b36fcfcb8db920536e24ae3594af1de9f59f854913673647222a8af66763e7b", 0x4c}, {&(0x7f00000002c0)="1349d3b2f2bd985256b41f3d6508e0452424d10db1ecc2007cf0f821fd5d177d0ddd21d2e018980fb8dbc57077168b013f43f13a4c614bd0832bd7", 0x3b}, {&(0x7f0000000300)="1a4949ac3719d1f3545942350003a6633b7d1afacbb0af49d4bf7cf6a5516b98dafc3a60116cea2256586446139a3a42cae06adc411141688cb23256dcc1f767a221f7e9f5d1f7f90cf24204719d4cc4b71b4fb9bbfffc551a0313529b492a85214c817307786ae300b4cffb8fa1f1f5f4ddecda8fc9421204c9f4979c93536363999fc29950915fc407030436ac84b872058da3d5698599739055051fec88e6e85deae55b3b6d90a58a4668ca0832c69f21c9a24ac0a8ff6b223604da90d4ed841e21b457", 0xc5}, {&(0x7f0000000400)="2babc3c341ba3a3028", 0x9}, {&(0x7f0000000440)="daaf4575227bb0b120e149743b4e91707275b86f54efc287492d57a4263efb28816812c8f91dac25d9e36ca7d8ba5ca901a328b7cfb4cde216b430bd83f49c1f0f604a84501c0f5a56b3352f3a99a56cc68daaad92a3e33b92c22005bfa0d94fd0affea13ae857e7ce0ab24b19f2760d2dfcecf81d404a4873efa365d339bd1a26197276d51c643f292f3ee7db196a6f40cf3b32c83eb1b5e7723748083411a4b2520886c6639c8025bd59293cea27df1a02313619ee5792bcfe682c9234364f29ae3aff8d6b2489444015e5efa8942e5a0c25375ce042effb10e84a416a7f9504a92806fa5e5c484eea8cebc3c22d873b", 0xf1}, {&(0x7f00000006c0)="489d535780621a2a1ad12aa41db622a3a84e4b4ae450997ad7f300d3991f006f9be1283253210c70f7b49adfad221c333a08273769a6688da123f6d6bb879ff413dc77f617b882c5a02c4c921c66164b5f7e1a4321924435f8973d6fd2011ee3d6a6d02e97bbbb15755fbe777a777a6dad0e94dc5d901f3783cd7efb22b0c797b1f3c41c5746203e4c58366747795d38c8a06c211dccb4bdaf1de5f534f70cc7d017526442d0927964f514361ff0190ff244355607520b1144439523119c745fdf2baab01a60002309", 0xc9}], 0x8, &(0x7f00000007c0)=[{0x60, 0x10a, 0xac8, "891d2c2120a747f2cf7096269105cd003e614f2e57613f3a6f32de3826960a96c3de860d6e8d29bac95aecea40e081c9b09cbc507e0e21923d35efebd3c57dc4b993c4f4ae16e7abac5382f76808"}, {0xd0, 0x2b1, 0x5, "8071f2409c6d08ae6ac6409664860a1649e05187eba607e3c1e1a372976f42f623425cfd5bc26c448088181f1776405e8758f10fe130f76306d030ec32e6cf5c7096dd09b43445757ef5ff643479c0b45e199e00c4eef9f9a801380b70302dec958383d54d8938b24b3df4567f7b5de3df72a8187700cd130a62dbc3ca9dabb2d580c7182758cbb21e9265d3103eaf48361279bacdab19167fb3f464dd5388fe3395b824f71a3a450ca4444693977c63560f9ac56479e0e66bada21f698a"}, {0x50, 0x107, 0x0, "a86790d816f5538c574980aa446a1c6bf08fb6bf81b52810ead0f2ee540057b2fb08bc732eaea353cf3597c20c4ef7b41393f1e26156145442e0e2580726"}, {0x38, 0x104, 0x7, "1ac9c0dccc8731cadcf1013db32dcfa869a160b3a116c0d80e66ff59953b189142"}, {0x28, 0x103, 0xaa95, "2287b9ac121b5127acfee67d53096621d884"}], 0x1e0, 0x1}, 0x38) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)={'raw\x00', 0x0, [0x2, 0x401, 0xfff, 0x9, 0x8]}, &(0x7f0000000080)=0x54) (async) 02:29:22 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:22 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sync() 02:29:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1, 0x4, 0x301}, 0x14}}, 0x8000) 02:29:22 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r6) syz_io_uring_submit(r6, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) 02:29:22 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:22 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:22 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f00000009c0)={&(0x7f0000000100)={0x2a, 0x2306b02d680b725e, 0x1}, 0xc, &(0x7f0000000540)=[{&(0x7f0000000140)="a3473fe7e0849c6cfd1dfb2fc12f5b69beb2ee6b6d68fc5febdc", 0x1a}, {&(0x7f0000000180)="d952d5632931b25dc7b51820b33188d75e2852cbc1fafd48cf24be9b1ccf9a27c6dd156f9d91b71892ff8288f61810d62895a350bbdbb7b4b397151d12e16d6b969c233d23a07fdc0f72fd25bda19b16614f2086143b367223aea194d7ee1d8313c5233e4a901ce262e8b0292db73746f549f3407268f307e98e9e2462d5d92ed19db06614e96e2da61c85400a686136358fa1b737bcb1c26db29af6f1fcc15b8221ab1e4dec9969b9d102e62083b9fd220bbe98b25c20493230217c8889", 0xbe}, {&(0x7f0000000240)="0c82685e42289f23a086200edf40a6cbf04ba845512a26bfac81a1012a2782784c4d3cafa77bcbb33874e25d3b36fcfcb8db920536e24ae3594af1de9f59f854913673647222a8af66763e7b", 0x4c}, {&(0x7f00000002c0)="1349d3b2f2bd985256b41f3d6508e0452424d10db1ecc2007cf0f821fd5d177d0ddd21d2e018980fb8dbc57077168b013f43f13a4c614bd0832bd7", 0x3b}, {&(0x7f0000000300)="1a4949ac3719d1f3545942350003a6633b7d1afacbb0af49d4bf7cf6a5516b98dafc3a60116cea2256586446139a3a42cae06adc411141688cb23256dcc1f767a221f7e9f5d1f7f90cf24204719d4cc4b71b4fb9bbfffc551a0313529b492a85214c817307786ae300b4cffb8fa1f1f5f4ddecda8fc9421204c9f4979c93536363999fc29950915fc407030436ac84b872058da3d5698599739055051fec88e6e85deae55b3b6d90a58a4668ca0832c69f21c9a24ac0a8ff6b223604da90d4ed841e21b457", 0xc5}, {&(0x7f0000000400)="2babc3c341ba3a3028", 0x9}, {&(0x7f0000000440)="daaf4575227bb0b120e149743b4e91707275b86f54efc287492d57a4263efb28816812c8f91dac25d9e36ca7d8ba5ca901a328b7cfb4cde216b430bd83f49c1f0f604a84501c0f5a56b3352f3a99a56cc68daaad92a3e33b92c22005bfa0d94fd0affea13ae857e7ce0ab24b19f2760d2dfcecf81d404a4873efa365d339bd1a26197276d51c643f292f3ee7db196a6f40cf3b32c83eb1b5e7723748083411a4b2520886c6639c8025bd59293cea27df1a02313619ee5792bcfe682c9234364f29ae3aff8d6b2489444015e5efa8942e5a0c25375ce042effb10e84a416a7f9504a92806fa5e5c484eea8cebc3c22d873b", 0xf1}, {&(0x7f00000006c0)="489d535780621a2a1ad12aa41db622a3a84e4b4ae450997ad7f300d3991f006f9be1283253210c70f7b49adfad221c333a08273769a6688da123f6d6bb879ff413dc77f617b882c5a02c4c921c66164b5f7e1a4321924435f8973d6fd2011ee3d6a6d02e97bbbb15755fbe777a777a6dad0e94dc5d901f3783cd7efb22b0c797b1f3c41c5746203e4c58366747795d38c8a06c211dccb4bdaf1de5f534f70cc7d017526442d0927964f514361ff0190ff244355607520b1144439523119c745fdf2baab01a60002309", 0xc9}], 0x8, &(0x7f00000007c0)=[{0x60, 0x10a, 0xac8, "891d2c2120a747f2cf7096269105cd003e614f2e57613f3a6f32de3826960a96c3de860d6e8d29bac95aecea40e081c9b09cbc507e0e21923d35efebd3c57dc4b993c4f4ae16e7abac5382f76808"}, {0xd0, 0x2b1, 0x5, "8071f2409c6d08ae6ac6409664860a1649e05187eba607e3c1e1a372976f42f623425cfd5bc26c448088181f1776405e8758f10fe130f76306d030ec32e6cf5c7096dd09b43445757ef5ff643479c0b45e199e00c4eef9f9a801380b70302dec958383d54d8938b24b3df4567f7b5de3df72a8187700cd130a62dbc3ca9dabb2d580c7182758cbb21e9265d3103eaf48361279bacdab19167fb3f464dd5388fe3395b824f71a3a450ca4444693977c63560f9ac56479e0e66bada21f698a"}, {0x50, 0x107, 0x0, "a86790d816f5538c574980aa446a1c6bf08fb6bf81b52810ead0f2ee540057b2fb08bc732eaea353cf3597c20c4ef7b41393f1e26156145442e0e2580726"}, {0x38, 0x104, 0x7, "1ac9c0dccc8731cadcf1013db32dcfa869a160b3a116c0d80e66ff59953b189142"}, {0x28, 0x103, 0xaa95, "2287b9ac121b5127acfee67d53096621d884"}], 0x1e0, 0x1}, 0x38) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)={'raw\x00', 0x0, [0x2, 0x401, 0xfff, 0x9, 0x8]}, &(0x7f0000000080)=0x54) 02:29:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1, 0x4, 0x301}, 0x14}}, 0x8000) 02:29:22 executing program 1: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x2b, 0x3, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x5a}, {&(0x7f0000000040)="82dd523e374bba46b2dd58375fdc98301ab5169aa7f0a20d526abfdb0bf7714ce7fb6dc2161c296a54b284d8b4c9572a02d93c535a6794b5bb516a58deded6fba1cd9239787c6eb3412c6c5c82b3e2d3cc792d4d75d47f360764e0aa6874c3335881122a3f9e75541f24a7555f4fe0d0272adc1a75a073c3655b29c7d94e361663c14844a1918487211909ee11bd0c3cd4840d2c6cdb777b07b400bc4d51e1669941804cd4c00dde598c34781fda796cd25aae6f7de6c4e4c4658fb5a455fef71a8f41ef94880309cfd8881a10200846f4"}], 0x9}, 0x38) 02:29:22 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:22 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sync() 02:29:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x8000) 02:29:22 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:22 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x8000) 02:29:22 executing program 1: socket$qrtr(0x2a, 0x2, 0x0) (async) socketpair(0x2b, 0x3, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x5a}, {&(0x7f0000000040)="82dd523e374bba46b2dd58375fdc98301ab5169aa7f0a20d526abfdb0bf7714ce7fb6dc2161c296a54b284d8b4c9572a02d93c535a6794b5bb516a58deded6fba1cd9239787c6eb3412c6c5c82b3e2d3cc792d4d75d47f360764e0aa6874c3335881122a3f9e75541f24a7555f4fe0d0272adc1a75a073c3655b29c7d94e361663c14844a1918487211909ee11bd0c3cd4840d2c6cdb777b07b400bc4d51e1669941804cd4c00dde598c34781fda796cd25aae6f7de6c4e4c4658fb5a455fef71a8f41ef94880309cfd8881a10200846f4"}], 0x9}, 0x38) 02:29:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x8000) 02:29:22 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sync() 02:29:22 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:22 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:22 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:22 executing program 1: socket$qrtr(0x2a, 0x2, 0x0) (async) socketpair(0x2b, 0x3, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x5a}, {&(0x7f0000000040)="82dd523e374bba46b2dd58375fdc98301ab5169aa7f0a20d526abfdb0bf7714ce7fb6dc2161c296a54b284d8b4c9572a02d93c535a6794b5bb516a58deded6fba1cd9239787c6eb3412c6c5c82b3e2d3cc792d4d75d47f360764e0aa6874c3335881122a3f9e75541f24a7555f4fe0d0272adc1a75a073c3655b29c7d94e361663c14844a1918487211909ee11bd0c3cd4840d2c6cdb777b07b400bc4d51e1669941804cd4c00dde598c34781fda796cd25aae6f7de6c4e4c4658fb5a455fef71a8f41ef94880309cfd8881a10200846f4"}], 0x9}, 0x38) 02:29:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) 02:29:22 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sync() 02:29:22 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0), 0x100000000000034b, 0x0, 0xffffffffffffff3f}, 0x42) 02:29:22 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0), 0x100000000000034b, 0x0, 0xffffffffffffff3f}, 0x42) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$qrtr(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0), 0x100000000000034b, 0x0, 0xffffffffffffff3f}, 0x42) (async) 02:29:22 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sync() 02:29:23 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:23 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sync() 02:29:23 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:23 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:23 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0), 0x100000000000034b, 0x0, 0xffffffffffffff3f}, 0x42) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$qrtr(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0), 0x100000000000034b, 0x0, 0xffffffffffffff3f}, 0x42) (async) 02:29:23 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:23 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sync() 02:29:23 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r1) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x41880}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="08002dbd7000fcdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="cc3f4b4037b7cc44a279a8cb1132dc673ae40210bdf091d248da3d99a248fe685436fc38bdc39f430877cd39596ed0039f7ed0284caf55e7b29ea67b0259c5771b51a93b11eb37beca1c539cbc987d9b3f40f031c1f7cbad904ded27f98d1787e35a6d8dff3b74e106610a82c1d999953e2f0d8f6f200483721326497443ae2ff412fb54d5cebb6419f74041a69621aade74b6a6ec0eac0ba9c1979a418f4f9a94eb54abae86a9d8"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) 02:29:23 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sync() 02:29:23 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:23 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:23 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r1) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x41880}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="08002dbd7000fcdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="cc3f4b4037b7cc44a279a8cb1132dc673ae40210bdf091d248da3d99a248fe685436fc38bdc39f430877cd39596ed0039f7ed0284caf55e7b29ea67b0259c5771b51a93b11eb37beca1c539cbc987d9b3f40f031c1f7cbad904ded27f98d1787e35a6d8dff3b74e106610a82c1d999953e2f0d8f6f200483721326497443ae2ff412fb54d5cebb6419f74041a69621aade74b6a6ec0eac0ba9c1979a418f4f9a94eb54abae86a9d8"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) (async, rerun: 64) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (rerun: 64) 02:29:23 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:23 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sync() 02:29:23 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r1) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x41880}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="08002dbd7000fcdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="cc3f4b4037b7cc44a279a8cb1132dc673ae40210bdf091d248da3d99a248fe685436fc38bdc39f430877cd39596ed0039f7ed0284caf55e7b29ea67b0259c5771b51a93b11eb37beca1c539cbc987d9b3f40f031c1f7cbad904ded27f98d1787e35a6d8dff3b74e106610a82c1d999953e2f0d8f6f200483721326497443ae2ff412fb54d5cebb6419f74041a69621aade74b6a6ec0eac0ba9c1979a418f4f9a94eb54abae86a9d8"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) socket$qrtr(0x2a, 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r1) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x41880}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="08002dbd7000fcdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="cc3f4b4037b7cc44a279a8cb1132dc673ae40210bdf091d248da3d99a248fe685436fc38bdc39f430877cd39596ed0039f7ed0284caf55e7b29ea67b0259c5771b51a93b11eb37beca1c539cbc987d9b3f40f031c1f7cbad904ded27f98d1787e35a6d8dff3b74e106610a82c1d999953e2f0d8f6f200483721326497443ae2ff412fb54d5cebb6419f74041a69621aade74b6a6ec0eac0ba9c1979a418f4f9a94eb54abae86a9d8"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) (async) 02:29:23 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) sync() 02:29:23 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:23 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:23 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x20000000}, 0x38) socket$nl_audit(0x10, 0x3, 0x9) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@empty, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x80, 0x8000, 0x101, 0x7fff, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x66, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@timestamp_prespec={0x44, 0x3c, 0x2d, 0x3, 0xd, [{@rand_addr=0x64010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0x6}, 0x7ff}, {@empty, 0xffffff81}, {@loopback, 0x818b}, {@private=0xa010101, 0x7fff}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x9}]}, @ssrr={0x89, 0x7, 0x1a, [@multicast2]}, @noop, @rr={0x7, 0xb, 0x54, [@dev={0xac, 0x14, 0x14, 0x40}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) 02:29:23 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:23 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sync() 02:29:23 executing program 0: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r1, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) sync() 02:29:23 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x20000000}, 0x38) socket$nl_audit(0x10, 0x3, 0x9) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@empty, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x80, 0x8000, 0x101, 0x7fff, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x66, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@timestamp_prespec={0x44, 0x3c, 0x2d, 0x3, 0xd, [{@rand_addr=0x64010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0x6}, 0x7ff}, {@empty, 0xffffff81}, {@loopback, 0x818b}, {@private=0xa010101, 0x7fff}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x9}]}, @ssrr={0x89, 0x7, 0x1a, [@multicast2]}, @noop, @rr={0x7, 0xb, 0x54, [@dev={0xac, 0x14, 0x14, 0x40}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x20000000}, 0x38) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@empty}, &(0x7f0000000040)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x80, 0x8000, 0x101, 0x7fff, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x66, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@timestamp_prespec={0x44, 0x3c, 0x2d, 0x3, 0xd, [{@rand_addr=0x64010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0x6}, 0x7ff}, {@empty, 0xffffff81}, {@loopback, 0x818b}, {@private=0xa010101, 0x7fff}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x9}]}, @ssrr={0x89, 0x7, 0x1a, [@multicast2]}, @noop, @rr={0x7, 0xb, 0x54, [@dev={0xac, 0x14, 0x14, 0x40}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) (async) 02:29:23 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:23 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:23 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sync() 02:29:23 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x20000000}, 0x38) (async) socket$nl_audit(0x10, 0x3, 0x9) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@empty, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x80, 0x8000, 0x101, 0x7fff, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x66, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@timestamp_prespec={0x44, 0x3c, 0x2d, 0x3, 0xd, [{@rand_addr=0x64010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0x6}, 0x7ff}, {@empty, 0xffffff81}, {@loopback, 0x818b}, {@private=0xa010101, 0x7fff}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x9}]}, @ssrr={0x89, 0x7, 0x1a, [@multicast2]}, @noop, @rr={0x7, 0xb, 0x54, [@dev={0xac, 0x14, 0x14, 0x40}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) 02:29:23 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:23 executing program 0: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) sync() 02:29:23 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:23 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:23 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x54}}, 0x0) 02:29:23 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sync() 02:29:23 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x54}}, 0x0) 02:29:23 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:23 executing program 0: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) sync() 02:29:23 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:23 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:23 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0xffffff7f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x54}}, 0x0) 02:29:23 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sync() 02:29:23 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:23 executing program 0: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) sync() 02:29:23 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:23 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:23 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:23 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) sync() 02:29:23 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:23 executing program 0: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) sync() 02:29:23 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:23 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:23 executing program 5: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r1, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) sync() 02:29:23 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:23 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:23 executing program 5: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) sync() 02:29:23 executing program 4: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:23 executing program 0: socket$qrtr(0x2a, 0x2, 0x0) sync() 02:29:23 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:23 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:23 executing program 0: sync() 02:29:23 executing program 4: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:23 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:23 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:23 executing program 5: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) sync() 02:29:23 executing program 4: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:23 executing program 0: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:23 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) 02:29:23 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) [ 553.338588][T12186] ================================================================== [ 553.346715][T12186] BUG: KCSAN: data-race in __writeback_single_inode / inode_io_list_del [ 553.355082][T12186] [ 553.357409][T12186] read-write to 0xffff88810b33eb20 of 8 bytes by task 3139 on cpu 1: [ 553.365479][T12186] inode_io_list_del+0x4e/0x1c0 [ 553.370370][T12186] evict+0xad/0x410 [ 553.374199][T12186] iput+0x3f9/0x580 [ 553.378019][T12186] vfs_rmdir+0x270/0x2f0 [ 553.382275][T12186] do_rmdir+0x176/0x300 02:29:23 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) [ 553.386445][T12186] __x64_sys_unlinkat+0xa0/0xb0 [ 553.391317][T12186] do_syscall_64+0x2b/0x70 [ 553.395743][T12186] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 553.401646][T12186] [ 553.403953][T12186] read to 0xffff88810b33eb20 of 8 bytes by task 12186 on cpu 0: [ 553.411743][T12186] __writeback_single_inode+0x46/0x590 [ 553.417208][T12186] writeback_sb_inodes+0x4dd/0xa30 [ 553.422337][T12186] __writeback_inodes_wb+0xa0/0x1b0 [ 553.427550][T12186] wb_writeback+0x280/0x650 [ 553.432041][T12186] wb_do_writeback+0x418/0x600 [ 553.436787][T12186] wb_workfn+0x88/0x260 [ 553.440936][T12186] process_one_work+0x3d3/0x720 [ 553.445799][T12186] worker_thread+0x618/0xa70 [ 553.450386][T12186] kthread+0x1a9/0x1e0 [ 553.454461][T12186] ret_from_fork+0x1f/0x30 [ 553.458866][T12186] [ 553.461172][T12186] value changed: 0x0000000000020081 -> 0x00000000000000a1 [ 553.468255][T12186] [ 553.470567][T12186] Reported by Kernel Concurrency Sanitizer on: [ 553.476711][T12186] CPU: 0 PID: 12186 Comm: kworker/u4:60 Not tainted 6.1.0-syzkaller-11674-g84e57d292203-dirty #0 02:29:24 executing program 5: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) sync() 02:29:24 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) [ 553.487198][T12186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 553.497248][T12186] Workqueue: writeback wb_workfn (flush-8:0) [ 553.503225][T12186] ================================================================== 02:29:24 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:24 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:24 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) 02:29:24 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:24 executing program 3: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:24 executing program 5: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) sync() 02:29:24 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) 02:29:24 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) 02:29:24 executing program 3: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:24 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:24 executing program 5: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) sync() 02:29:24 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:24 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) 02:29:24 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:24 executing program 3: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:24 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) 02:29:24 executing program 5: socket$qrtr(0x2a, 0x2, 0x0) sync() 02:29:24 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:24 executing program 5: socket$qrtr(0x2a, 0x2, 0x0) sync() 02:29:24 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:24 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) sync() 02:29:24 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) 02:29:24 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:24 executing program 5: socket$qrtr(0x2a, 0x2, 0x0) sync() 02:29:24 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r8) syz_io_uring_submit(r8, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) 02:29:24 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_complete(0x0) sync() 02:29:24 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:24 executing program 5: socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)) sync() 02:29:24 executing program 2: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) 02:29:24 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:24 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_complete(0x0) sync() 02:29:24 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:24 executing program 2: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) 02:29:24 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:24 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:24 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) sync() sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40000) 02:29:24 executing program 5: socketpair(0x0, 0x0, 0x80000000, &(0x7f0000000140)) sync() 02:29:24 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_complete(0x0) sync() 02:29:24 executing program 2: socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) sync() syz_io_uring_complete(r7) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x10}, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) 02:29:24 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x7, 0xecc0, 0x0, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x0, [{@empty, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x48eee108}]}, @timestamp={0x44, 0x20, 0xe8, 0x0, 0x2, [0x80000001, 0x80, 0x7, 0x800, 0x3f, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@local, 0x5}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0x7, [{@empty, 0x1}, {@loopback, 0xc6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3f}, {@multicast1}, {@remote, 0x4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0xf, 0x20, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xd9, [@loopback]}, @generic={0x83, 0x5, "0f18d1"}, @end, @generic={0x44, 0x7, "a9ee9ec900"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r4 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) sync() 02:29:24 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) socketpair(0x6, 0x0, 0x80000000, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x8, 0x2, 0x8001, 0x7f, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@remote, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffff}]}, @end]}}}}}) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x5460, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x4c94bd4e, 0x1a202) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc40) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7493, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x12a02, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_complete(0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000003c0)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e23, 0x2, @private2, 0x8001}}, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}]}, 0x310) syz_io_uring_setup(0x5b03, &(0x7f0000000840)={0x0, 0xb02, 0x1, 0x3, 0x104, 0x0, r6}, &(0x7f0000ffb000/0x400