ffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:36 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3}}, './file0\x00'}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000001c0)={0x9, 0x5, 0x9, 0xfff, '\x00', '\x00', '\x00', 0x9, 0x77, 0x2, 0x6, "3a42f091e0d3f399cd2cacbd55ab7010"}) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x20, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x5) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:36 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x480400, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1f}}, './file0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x480400, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1f}}, './file0\x00'}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) 14:16:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r10}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r11}, {0x8, 0x1, r12}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r14) r15 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r15}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r12}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x9, 0x5, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x40, 0x1, 0x9}}) 14:16:36 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3}}, './file0\x00'}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000001c0)={0x9, 0x5, 0x9, 0xfff, '\x00', '\x00', '\x00', 0x9, 0x77, 0x2, 0x6, "3a42f091e0d3f399cd2cacbd55ab7010"}) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x20, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x5) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) [ 1450.315843] nla_parse: 48 callbacks suppressed [ 1450.315852] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1450.363050] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:16:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x9, 0x5, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x40, 0x1, 0x9}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x9, 0x5, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x40, 0x1, 0x9}}) 14:16:36 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3}}, './file0\x00'}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000001c0)={0x9, 0x5, 0x9, 0xfff, '\x00', '\x00', '\x00', 0x9, 0x77, 0x2, 0x6, "3a42f091e0d3f399cd2cacbd55ab7010"}) (async, rerun: 64) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x20, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x5) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r10}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r11}, {0x8, 0x1, r12}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r14) r15 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r15}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r12}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 1450.470490] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1450.506213] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1450.590302] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1450.606475] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1450.667953] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1450.683253] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:16:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:37 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x9, 0x5, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x40, 0x1, 0x9}}) (rerun: 32) 14:16:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:37 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) getpeername$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) 14:16:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:37 executing program 3: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x1}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) [ 1451.258751] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1451.268604] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:16:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) (async) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) 14:16:37 executing program 3: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x1}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:38 executing program 3: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x1}) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:38 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) 14:16:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r5) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:38 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) (async) getpeername$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) (async) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r3) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) 14:16:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000480), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x20, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20014001}, 0x80) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x29089acfd20a94d7}, 0x4044801) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0xa9, 0x5, 0x940c, 0x8, @private0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x20, 0x80, 0x1, 0x400}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044080}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r5, 0x29, 0x3, 0xff, 0x0, 0x10, @dev={0xfe, 0x80, '\x00', 0x32}, @remote, 0x8000, 0x7800, 0x4, 0x8}}) 14:16:38 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) 14:16:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r10}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r11}, {0x8, 0x1, r12}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r14) r15 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r15}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r12}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r5) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:38 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) 14:16:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r10}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r11}, {0x8, 0x1, r12}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r14) r15 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r15}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r12}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000480), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x20, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20014001}, 0x80) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x29089acfd20a94d7}, 0x4044801) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0xa9, 0x5, 0x940c, 0x8, @private0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x20, 0x80, 0x1, 0x400}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0xa9, 0x5, 0x940c, 0x8, @private0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x20, 0x80, 0x1, 0x400}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044080}, 0x4) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044080}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r5, 0x29, 0x3, 0xff, 0x0, 0x10, @dev={0xfe, 0x80, '\x00', 0x32}, @remote, 0x8000, 0x7800, 0x4, 0x8}}) 14:16:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r5) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:38 executing program 5: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x40d, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4840}, 0x44000) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000140)=""/218, 0xda, 0x12040, &(0x7f0000000240)={0x1a, 0x13, 0x5, 0x1, 0x3, 0x1, @remote}, 0x10) 14:16:39 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) (async) getpeername$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) (async) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r3) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (async, rerun: 64) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) (rerun: 64) 14:16:39 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r10}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r11}, {0x8, 0x1, r12}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r14) r15 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r15}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r12}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r5) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:39 executing program 5: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x40d, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4840}, 0x44000) socket$inet6_udp(0xa, 0x2, 0x0) (async) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000140)=""/218, 0xda, 0x12040, &(0x7f0000000240)={0x1a, 0x13, 0x5, 0x1, 0x3, 0x1, @remote}, 0x10) 14:16:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000480), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x20, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20014001}, 0x80) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x29089acfd20a94d7}, 0x4044801) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0xa9, 0x5, 0x940c, 0x8, @private0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x20, 0x80, 0x1, 0x400}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0xa9, 0x5, 0x940c, 0x8, @private0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x20, 0x80, 0x1, 0x400}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044080}, 0x4) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044080}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r5, 0x29, 0x3, 0xff, 0x0, 0x10, @dev={0xfe, 0x80, '\x00', 0x32}, @remote, 0x8000, 0x7800, 0x4, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r5, 0x29, 0x3, 0xff, 0x0, 0x10, @dev={0xfe, 0x80, '\x00', 0x32}, @remote, 0x8000, 0x7800, 0x4, 0x8}}) 14:16:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:39 executing program 5: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x40d, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4840}, 0x44000) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000140)=""/218, 0xda, 0x12040, &(0x7f0000000240)={0x1a, 0x13, 0x5, 0x1, 0x3, 0x1, @remote}, 0x10) (rerun: 32) 14:16:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x48}, 0x1, 0x0, 0x0, 0x200040c0}, 0x80000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000040)={r0, r3, 0x0, 0x2a, &(0x7f0000000000)="b5d2bcb0c9bcf000ce4bd2a78340de748e273f41f92bc00b7394877e2162d4ea2c07bff9c5fcb1d96150", 0x80, 0x20, 0x81, 0x4, 0x6ab3, 0x3, 0x5d, 'syz1\x00'}) 14:16:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r5) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:39 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:39 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) getsockname$unix(r1, &(0x7f0000000180), &(0x7f0000000100)=0x6e) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0x1ff, 0x8, @loopback, @remote, 0x700, 0x8, 0x6, 0x2}}) 14:16:40 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1}) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) accept4$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x10, 0x800) recvfrom$l2tp(r1, 0x0, 0xfffffffffffffe29, 0x14bdcff1d32caab0, 0x0, 0x38) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) 14:16:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:40 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x48}, 0x1, 0x0, 0x0, 0x200040c0}, 0x80000) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x48}, 0x1, 0x0, 0x0, 0x200040c0}, 0x80000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000040)={r0, r3, 0x0, 0x2a, &(0x7f0000000000)="b5d2bcb0c9bcf000ce4bd2a78340de748e273f41f92bc00b7394877e2162d4ea2c07bff9c5fcb1d96150", 0x80, 0x20, 0x81, 0x4, 0x6ab3, 0x3, 0x5d, 'syz1\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000040)={r0, r3, 0x0, 0x2a, &(0x7f0000000000)="b5d2bcb0c9bcf000ce4bd2a78340de748e273f41f92bc00b7394877e2162d4ea2c07bff9c5fcb1d96150", 0x80, 0x20, 0x81, 0x4, 0x6ab3, 0x3, 0x5d, 'syz1\x00'}) 14:16:40 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) getsockname$unix(r1, &(0x7f0000000180), &(0x7f0000000100)=0x6e) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0x1ff, 0x8, @loopback, @remote, 0x700, 0x8, 0x6, 0x2}}) 14:16:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:40 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r3) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r2, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:40 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x48}, 0x1, 0x0, 0x0, 0x200040c0}, 0x80000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000040)={r0, r3, 0x0, 0x2a, &(0x7f0000000000)="b5d2bcb0c9bcf000ce4bd2a78340de748e273f41f92bc00b7394877e2162d4ea2c07bff9c5fcb1d96150", 0x80, 0x20, 0x81, 0x4, 0x6ab3, 0x3, 0x5d, 'syz1\x00'}) 14:16:40 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1}) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) accept4$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x10, 0x800) recvfrom$l2tp(r1, 0x0, 0xfffffffffffffe29, 0x14bdcff1d32caab0, 0x0, 0x38) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) 14:16:40 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) getsockname$unix(r1, &(0x7f0000000180), &(0x7f0000000100)=0x6e) (async) getsockname$unix(r1, &(0x7f0000000180), &(0x7f0000000100)=0x6e) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0x1ff, 0x8, @loopback, @remote, 0x700, 0x8, 0x6, 0x2}}) 14:16:40 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r3) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r2, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:40 executing program 3: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x1, 0xf0, 0x0, 0x4, @mcast1, @loopback, 0x30, 0x1, 0x400000, 0x9}}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gre0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}]}, 0x54}}, 0x4000040) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000180)={'gretap0\x00', r0, 0x700, 0x1, 0x4, 0xfffffffc, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x66, 0x0, 0x9b, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}) 14:16:40 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1}) socket$l2tp(0x2, 0x2, 0x73) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) accept4$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x10, 0x800) recvfrom$l2tp(r1, 0x0, 0xfffffffffffffe29, 0x14bdcff1d32caab0, 0x0, 0x38) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) 14:16:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) 14:16:40 executing program 3: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x1, 0xf0, 0x0, 0x4, @mcast1, @loopback, 0x30, 0x1, 0x400000, 0x9}}) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gre0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}]}, 0x54}}, 0x4000040) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000180)={'gretap0\x00', r0, 0x700, 0x1, 0x4, 0xfffffffc, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x66, 0x0, 0x9b, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}) 14:16:40 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r3) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r2, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:40 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) write$cgroup_pressure(r1, &(0x7f0000000000)={'full', 0x20, 0x3711, 0x20, 0x1000000005}, 0x2f) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000001) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/vmstat\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189436, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) 14:16:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) 14:16:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:41 executing program 3: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x1, 0xf0, 0x0, 0x4, @mcast1, @loopback, 0x30, 0x1, 0x400000, 0x9}}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gre0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}]}, 0x54}}, 0x4000040) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000180)={'gretap0\x00', r0, 0x700, 0x1, 0x4, 0xfffffffc, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x66, 0x0, 0x9b, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}) 14:16:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:41 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r3) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r2, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) (async) 14:16:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:41 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x15}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x44}, 0x1, 0x0, 0x0, 0x2008000}, 0x40000) 14:16:41 executing program 5: sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x150, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 14:16:41 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:41 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) (async) write$cgroup_pressure(r1, &(0x7f0000000000)={'full', 0x20, 0x3711, 0x20, 0x1000000005}, 0x2f) (async) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000001) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/vmstat\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189436, 0x0) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) 14:16:41 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x15}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x44}, 0x1, 0x0, 0x0, 0x2008000}, 0x40000) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x15}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x44}, 0x1, 0x0, 0x0, 0x2008000}, 0x40000) (async) 14:16:41 executing program 5: sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x150, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) 14:16:41 executing program 1: sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:42 executing program 5: sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x150, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 14:16:42 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x15}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x44}, 0x1, 0x0, 0x0, 0x2008000}, 0x40000) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x15}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x44}, 0x1, 0x0, 0x0, 0x2008000}, 0x40000) (async) 14:16:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00802f66696c65300000100000000000cd18ba8824a92b989b1a4eb7bcc5f67017094bb22f2203478d55d12ca3cd16ad511659a8f8a28267646df97590e3a76c55a3687917ce9d351d5d2916fe6fc3b203f8f1a8b2db92b0f6b576c29281c8cbdd7e474f8892c7ae3f0aa2c3820711231f1796c95676931516eeee29dbf64321f3dc3a6a7a9f5e1f291317165d452b9d3575a4a34339957e831da43d6eb510653597e988d6febdf7698dbe1195068f00093eb33f05a0071306729dab0b1072a58c3ad24aa5e2b935545fb13b3d875bc619c8a3278ab88ce2c12b6b40e9447d"]) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000040)={0x3, 0x2, 0xffff, 0x80000001, 'syz0\x00', 0x7}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x5, 0x8}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r6) sendmsg$L2TP_CMD_NOOP(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r8, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r8, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x28, r8, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) [ 1455.635254] nla_parse: 62 callbacks suppressed [ 1455.635263] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1455.668915] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 14:16:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:42 executing program 1: sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:42 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r2) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r4, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x81210822}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x20, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xda}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x84) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r5) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) [ 1455.744701] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1455.789320] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1455.896708] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1455.906849] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 14:16:42 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) write$cgroup_pressure(r1, &(0x7f0000000000)={'full', 0x20, 0x3711, 0x20, 0x1000000005}, 0x2f) (async) write$cgroup_pressure(r1, &(0x7f0000000000)={'full', 0x20, 0x3711, 0x20, 0x1000000005}, 0x2f) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000001) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/vmstat\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189436, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189436, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) 14:16:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00802f66696c65300000100000000000cd18ba8824a92b989b1a4eb7bcc5f67017094bb22f2203478d55d12ca3cd16ad511659a8f8a28267646df97590e3a76c55a3687917ce9d351d5d2916fe6fc3b203f8f1a8b2db92b0f6b576c29281c8cbdd7e474f8892c7ae3f0aa2c3820711231f1796c95676931516eeee29dbf64321f3dc3a6a7a9f5e1f291317165d452b9d3575a4a34339957e831da43d6eb510653597e988d6febdf7698dbe1195068f00093eb33f05a0071306729dab0b1072a58c3ad24aa5e2b935545fb13b3d875bc619c8a3278ab88ce2c12b6b40e9447d"]) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000040)={0x3, 0x2, 0xffff, 0x80000001, 'syz0\x00', 0x7}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x5, 0x8}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r6) sendmsg$L2TP_CMD_NOOP(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r8, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r8, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x28, r8, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00802f66696c65300000100000000000cd18ba8824a92b989b1a4eb7bcc5f67017094bb22f2203478d55d12ca3cd16ad511659a8f8a28267646df97590e3a76c55a3687917ce9d351d5d2916fe6fc3b203f8f1a8b2db92b0f6b576c29281c8cbdd7e474f8892c7ae3f0aa2c3820711231f1796c95676931516eeee29dbf64321f3dc3a6a7a9f5e1f291317165d452b9d3575a4a34339957e831da43d6eb510653597e988d6febdf7698dbe1195068f00093eb33f05a0071306729dab0b1072a58c3ad24aa5e2b935545fb13b3d875bc619c8a3278ab88ce2c12b6b40e9447d"]) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000040)={0x3, 0x2, 0xffff, 0x80000001, 'syz0\x00', 0x7}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) (async) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r4) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x5, 0x8}}, './file0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r6) (async) sendmsg$L2TP_CMD_NOOP(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r8, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) (async) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r8, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) (async) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x28, r8, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async) 14:16:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:42 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r2) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r4, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) (async) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x81210822}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x20, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xda}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x84) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r5) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:42 executing program 1: sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:43 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r2) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r4, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) (async) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x81210822}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x20, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xda}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x84) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r5) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:43 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00802f66696c65300000100000000000cd18ba8824a92b989b1a4eb7bcc5f67017094bb22f2203478d55d12ca3cd16ad511659a8f8a28267646df97590e3a76c55a3687917ce9d351d5d2916fe6fc3b203f8f1a8b2db92b0f6b576c29281c8cbdd7e474f8892c7ae3f0aa2c3820711231f1796c95676931516eeee29dbf64321f3dc3a6a7a9f5e1f291317165d452b9d3575a4a34339957e831da43d6eb510653597e988d6febdf7698dbe1195068f00093eb33f05a0071306729dab0b1072a58c3ad24aa5e2b935545fb13b3d875bc619c8a3278ab88ce2c12b6b40e9447d"]) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000040)={0x3, 0x2, 0xffff, 0x80000001, 'syz0\x00', 0x7}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000040)={0x3, 0x2, 0xffff, 0x80000001, 'syz0\x00', 0x7}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r4) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x5, 0x8}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r6) sendmsg$L2TP_CMD_NOOP(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r8, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) (async) sendmsg$L2TP_CMD_NOOP(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r8, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) (async) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r8, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x28, r8, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 14:16:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 1456.588698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1456.638565] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 14:16:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:43 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) pipe2$9p(&(0x7f0000000000), 0x40) 14:16:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:43 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:43 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7612, 0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r3) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) socketpair(0x18, 0x6, 0xbe52, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xf0ffe1e97075bae4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xe9}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x1e}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x48801) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 1457.497898] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1457.517469] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 14:16:44 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:44 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7612, 0x5}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) (async, rerun: 64) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 64) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r3) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) (async) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async, rerun: 64) socketpair(0x18, 0x6, 0xbe52, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xf0ffe1e97075bae4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xe9}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x1e}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x48801) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:44 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:44 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) pipe2$9p(&(0x7f0000000000), 0x40) 14:16:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:44 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:44 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:44 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7612, 0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r3) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) (async) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) socketpair(0x18, 0x6, 0xbe52, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xf0ffe1e97075bae4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xe9}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x1e}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x48801) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:44 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0x1, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="ac000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000ffdbdf251b00000008000100706369001100020030303036ed73d2eeec129d989b8d6c8463ca303a30303a31302e300000000008000b00270000000e0001006e657464657673696d0000000f0002006e657464657673696d30120008000b0002000000080001007063690011000200303030303a30303a31302e300000000008000b007f00f80c0e0001006e657464657673696d0000000f0002006e65746465"], 0xac}, 0x1, 0x0, 0x0, 0x48001}, 0x4c005) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x800) 14:16:44 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:44 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:45 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (rerun: 64) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0x1, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="ac000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000ffdbdf251b00000008000100706369001100020030303036ed73d2eeec129d989b8d6c8463ca303a30303a31302e300000000008000b00270000000e0001006e657464657673696d0000000f0002006e657464657673696d30120008000b0002000000080001007063690011000200303030303a30303a31302e300000000008000b007f00f80c0e0001006e657464657673696d0000000f0002006e65746465"], 0xac}, 0x1, 0x0, 0x0, 0x48001}, 0x4c005) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x800) 14:16:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:45 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) (async, rerun: 32) pipe2$9p(&(0x7f0000000000), 0x40) (rerun: 32) 14:16:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:45 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:45 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0x1, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="ac000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000ffdbdf251b00000008000100706369001100020030303036ed73d2eeec129d989b8d6c8463ca303a30303a31302e300000000008000b00270000000e0001006e657464657673696d0000000f0002006e657464657673696d30120008000b0002000000080001007063690011000200303030303a30303a31302e300000000008000b007f00f80c0e0001006e657464657673696d0000000f0002006e65746465"], 0xac}, 0x1, 0x0, 0x0, 0x48001}, 0x4c005) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x800) 14:16:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:45 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xa8, r3, 0x200, 0x70bd2e, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:inetd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:tzdata_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r8, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400001}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x84, r9, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:chkpwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbtty_device_t:s0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x40140}, 0x4c000) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r7, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50010042}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x78, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0x27, 0xa, 'system_u:object_r:tzdata_exec_t:s0\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x40) 14:16:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="01fb5193ddfd670c4f000000", @ANYRES64=r0, @ANYBLOB="00000000000000002e2f66696c653000b555e75cabd9513afadd5211c29655935c3046955b8f2a0ef3f0883f00000000000000b060e2e2c34951d2b057e2475f70159b0f000000184f00000007197901b180dfbc302cbfe3b61c32b2b9aae0ed9e3f9efe48dcc5ed84b5f761f5d1c3061dcfa43d4ee7a372932291"]) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={0x1}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 14:16:45 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:45 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="01fb5193ddfd670c4f000000", @ANYRES64=r0, @ANYBLOB="00000000000000002e2f66696c653000b555e75cabd9513afadd5211c29655935c3046955b8f2a0ef3f0883f00000000000000b060e2e2c34951d2b057e2475f70159b0f000000184f00000007197901b180dfbc302cbfe3b61c32b2b9aae0ed9e3f9efe48dcc5ed84b5f761f5d1c3061dcfa43d4ee7a372932291"]) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="01fb5193ddfd670c4f000000", @ANYRES64=r0, @ANYBLOB="00000000000000002e2f66696c653000b555e75cabd9513afadd5211c29655935c3046955b8f2a0ef3f0883f00000000000000b060e2e2c34951d2b057e2475f70159b0f000000184f00000007197901b180dfbc302cbfe3b61c32b2b9aae0ed9e3f9efe48dcc5ed84b5f761f5d1c3061dcfa43d4ee7a372932291"]) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={0x1}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 14:16:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) [ 1459.609496] nbd: must specify a device to reconfigure 14:16:46 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev, 0x3}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r8, {0x1}}, './file0\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, ')*'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) 14:16:46 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:46 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xa8, r3, 0x200, 0x70bd2e, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:inetd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:tzdata_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r8, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400001}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x84, r9, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:chkpwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbtty_device_t:s0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x40140}, 0x4c000) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r7, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x4c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r7, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50010042}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x78, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0x27, 0xa, 'system_u:object_r:tzdata_exec_t:s0\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50010042}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x78, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0x27, 0xa, 'system_u:object_r:tzdata_exec_t:s0\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x40) 14:16:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="01fb5193ddfd670c4f000000", @ANYRES64=r0, @ANYBLOB="00000000000000002e2f66696c653000b555e75cabd9513afadd5211c29655935c3046955b8f2a0ef3f0883f00000000000000b060e2e2c34951d2b057e2475f70159b0f000000184f00000007197901b180dfbc302cbfe3b61c32b2b9aae0ed9e3f9efe48dcc5ed84b5f761f5d1c3061dcfa43d4ee7a372932291"]) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={0x1}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="01fb5193ddfd670c4f000000", @ANYRES64=r0, @ANYBLOB="00000000000000002e2f66696c653000b555e75cabd9513afadd5211c29655935c3046955b8f2a0ef3f0883f00000000000000b060e2e2c34951d2b057e2475f70159b0f000000184f00000007197901b180dfbc302cbfe3b61c32b2b9aae0ed9e3f9efe48dcc5ed84b5f761f5d1c3061dcfa43d4ee7a372932291"]) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={0x1}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) 14:16:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:46 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0/file0\x00'}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r3) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0xfffeffff, 0x5}}, './file0\x00'}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040011}, 0x4000040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r5) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7, {0xc2}}, './file0\x00'}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xbc, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x70, 0xa8, @random="9b342ec2f548ea4bb2ccb4e72947b380ae62915532015e49ac12c7932968fedf3b76d290f3ca4b511ae4ba3f9f098393555598137795171063c5fb97f70eb36ea4197db8e73babe2a93ef1bf743ede83f8f75215e89de9bc02b06638e414d6fe1e58a9b58a46298217dd6a9a"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1f}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) 14:16:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:46 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) [ 1460.456885] nbd: must specify a device to reconfigure 14:16:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) [ 1460.485377] nbd: must specify a device to reconfigure 14:16:46 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xa8, r3, 0x200, 0x70bd2e, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:inetd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:tzdata_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r6) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x0) (async) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r8, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400001}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x84, r9, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:chkpwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbtty_device_t:s0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x40140}, 0x4c000) (async) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r7, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50010042}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x78, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0x27, 0xa, 'system_u:object_r:tzdata_exec_t:s0\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x40) 14:16:47 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0/file0\x00'}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r3) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0xfffeffff, 0x5}}, './file0\x00'}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040011}, 0x4000040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r5) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7, {0xc2}}, './file0\x00'}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xbc, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x70, 0xa8, @random="9b342ec2f548ea4bb2ccb4e72947b380ae62915532015e49ac12c7932968fedf3b76d290f3ca4b511ae4ba3f9f098393555598137795171063c5fb97f70eb36ea4197db8e73babe2a93ef1bf743ede83f8f75215e89de9bc02b06638e414d6fe1e58a9b58a46298217dd6a9a"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1f}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0/file0\x00'}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r3) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0xfffeffff, 0x5}}, './file0\x00'}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) (async) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040011}, 0x4000040) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r5) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7, {0xc2}}, './file0\x00'}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) (async) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xbc, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x70, 0xa8, @random="9b342ec2f548ea4bb2ccb4e72947b380ae62915532015e49ac12c7932968fedf3b76d290f3ca4b511ae4ba3f9f098393555598137795171063c5fb97f70eb36ea4197db8e73babe2a93ef1bf743ede83f8f75215e89de9bc02b06638e414d6fe1e58a9b58a46298217dd6a9a"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1f}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) (async) [ 1460.697971] nla_parse: 38 callbacks suppressed [ 1460.697982] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1460.711992] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 14:16:47 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev, 0x3}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r4) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r5) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r8, {0x1}}, './file0\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, ')*'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) 14:16:47 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:47 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0/file0\x00'}) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r3) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0xfffeffff, 0x5}}, './file0\x00'}) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040011}, 0x4000040) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r5) (async) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7, {0xc2}}, './file0\x00'}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xbc, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x70, 0xa8, @random="9b342ec2f548ea4bb2ccb4e72947b380ae62915532015e49ac12c7932968fedf3b76d290f3ca4b511ae4ba3f9f098393555598137795171063c5fb97f70eb36ea4197db8e73babe2a93ef1bf743ede83f8f75215e89de9bc02b06638e414d6fe1e58a9b58a46298217dd6a9a"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1f}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) 14:16:47 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) 14:16:47 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) 14:16:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) [ 1461.316052] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1461.337415] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 14:16:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:47 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) (async) [ 1461.421406] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1461.449433] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:16:47 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:47 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) [ 1461.564304] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1461.612891] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 14:16:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42001080}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x44080) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x143c}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) 14:16:48 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev, 0x3}, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r8, {0x1}}, './file0\x00'}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) (async) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, ')*'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) 14:16:48 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) (async, rerun: 32) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (rerun: 64) 14:16:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:48 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r9) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r3, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r3, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r11}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r9}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:48 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42001080}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x44080) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x143c}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) 14:16:48 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x15) [ 1462.330030] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1462.346290] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 14:16:48 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:48 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r9) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r3, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r3, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r11}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r9}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:48 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x15) 14:16:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42001080}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x44080) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x143c}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42001080}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x44080) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x143c}}, './file0\x00'}) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) (async) 14:16:49 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44800}, 0x4080) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac273100082df5cfe73163c4197c7c5233b0c4923c0b8c6c44ff4d614105ea88271c2363e25da2bd92620fac738b19e846901643e0361c828861c5b768cf4417c9b527dcda914411f55f94952b686dab78e8ff0e94997071e29fe4f6b9989d79544aed8eee6f54191a56e5", @ANYRES16=r2, @ANYBLOB="00022bbd7000fddbdf2505000000080001007063690011000200303030303a30303a31302e300000000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000080001007063690011000200303030303a30303a31302e300000000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) 14:16:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x15) 14:16:49 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:49 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:49 executing program 5: ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x3) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'syztnl1\x00', 0x0}) 14:16:49 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r9) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r3, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r3, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r11}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r9}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:49 executing program 5: ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x3) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'syztnl1\x00', 0x0}) 14:16:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYBLOB="080025bd7000dbdf256c2b00000c0006000300000000040000000000000000000000000000000697d827c0a1bb4865290ba1298a80f0a0655e4d774d99243900bd4301d5a2447c229d431199057ff60f0b67de5892a8f0baef5f0f938a42ad8e28604ee5776b487073dc3c4db24493ec9319"], 0x2c}, 0x1, 0x0, 0x0, 0x240008b0}, 0x24002050) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x8913, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) 14:16:49 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:49 executing program 5: ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x3) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'syztnl1\x00', 0x0}) 14:16:49 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:50 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:50 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYBLOB="080025bd7000dbdf256c2b00000c0006000300000000040000000000000000000000000000000697d827c0a1bb4865290ba1298a80f0a0655e4d774d99243900bd4301d5a2447c229d431199057ff60f0b67de5892a8f0baef5f0f938a42ad8e28604ee5776b487073dc3c4db24493ec9319"], 0x2c}, 0x1, 0x0, 0x0, 0x240008b0}, 0x24002050) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x8913, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) 14:16:50 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000080), 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) 14:16:50 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0\x00'}) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44800}, 0x4080) (async) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac273100082df5cfe73163c4197c7c5233b0c4923c0b8c6c44ff4d614105ea88271c2363e25da2bd92620fac738b19e846901643e0361c828861c5b768cf4417c9b527dcda914411f55f94952b686dab78e8ff0e94997071e29fe4f6b9989d79544aed8eee6f54191a56e5", @ANYRES16=r2, @ANYBLOB="00022bbd7000fddbdf2505000000080001007063690011000200303030303a30303a31302e300000000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000080001007063690011000200303030303a30303a31302e300000000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) 14:16:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:50 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:50 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000080), 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) 14:16:50 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYBLOB="080025bd7000dbdf256c2b00000c0006000300000000040000000000000000000000000000000697d827c0a1bb4865290ba1298a80f0a0655e4d774d99243900bd4301d5a2447c229d431199057ff60f0b67de5892a8f0baef5f0f938a42ad8e28604ee5776b487073dc3c4db24493ec9319"], 0x2c}, 0x1, 0x0, 0x0, 0x240008b0}, 0x24002050) (async) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x8913, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) 14:16:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:50 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000080), 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) 14:16:50 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) 14:16:50 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:50 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file1\x00'}) bind$bt_sco(r2, &(0x7f00000000c0), 0x8) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3fec}}, './file1\x00'}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x8911, &(0x7f0000000140)={'syztnl0\x00', 0x0}) 14:16:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:51 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44800}, 0x4080) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac273100082df5cfe73163c4197c7c5233b0c4923c0b8c6c44ff4d614105ea88271c2363e25da2bd92620fac738b19e846901643e0361c828861c5b768cf4417c9b527dcda914411f55f94952b686dab78e8ff0e94997071e29fe4f6b9989d79544aed8eee6f54191a56e5", @ANYRES16=r2, @ANYBLOB="00022bbd7000fddbdf2505000000080001007063690011000200303030303a30303a31302e300000000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000080001007063690011000200303030303a30303a31302e300000000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) 14:16:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) 14:16:51 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:51 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file1\x00'}) bind$bt_sco(r2, &(0x7f00000000c0), 0x8) (async) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3fec}}, './file1\x00'}) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x8911, &(0x7f0000000140)={'syztnl0\x00', 0x0}) 14:16:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:51 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file1\x00'}) bind$bt_sco(r2, &(0x7f00000000c0), 0x8) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3fec}}, './file1\x00'}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x8911, &(0x7f0000000140)={'syztnl0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file1\x00'}) (async) bind$bt_sco(r2, &(0x7f00000000c0), 0x8) (async) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3fec}}, './file1\x00'}) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000040)) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x8911, &(0x7f0000000140)={'syztnl0\x00', 0x0}) (async) 14:16:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) 14:16:51 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:51 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) 14:16:52 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000b", @ANYRESHEX=r0, @ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x41010) r2 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r2, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) 14:16:52 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000000)=0x400, 0x4) 14:16:52 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) 14:16:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:52 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:52 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) (async) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000000)=0x400, 0x4) 14:16:52 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) 14:16:52 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) (async) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000000)=0x400, 0x4) 14:16:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'syztnl2\x00', 0x0}) 14:16:52 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'syztnl0\x00', 0x0}) [ 1466.213041] nla_parse: 46 callbacks suppressed [ 1466.213051] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1466.239639] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 14:16:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 1466.310086] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1466.343609] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1466.454056] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1466.469767] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:16:53 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000b", @ANYRESHEX=r0, @ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x41010) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000b", @ANYRESHEX=r0, @ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x41010) r2 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r2, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) 14:16:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'syztnl2\x00', 0x0}) 14:16:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:53 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'syztnl0\x00', 0x0}) 14:16:53 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:53 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:53 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'syztnl0\x00', 0x0}) 14:16:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'syztnl2\x00', 0x0}) 14:16:53 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x40, 0x2, 0x3, 0x40, @dev={0xfe, 0x80, '\x00', 0x3f}, @mcast2, 0x10, 0x40, 0xfffffffc, 0x80000000}}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x20}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x80d5}, 0x4c000) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r6) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fbdbdf25010000000e0001006e657464657673696d0000fc0e0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e3000000000"], 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r3) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r7, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c004}, 0xc811) socket$inet6_udp(0xa, 0x2, 0x0) [ 1467.158593] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1467.196372] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 14:16:53 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8911, &(0x7f0000000140)={'syztnl1\x00', 0x0}) 14:16:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) [ 1467.284611] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1467.319259] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:16:54 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000b", @ANYRESHEX=r0, @ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x41010) r2 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r2, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) (async) sendto$l2tp(r2, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) 14:16:54 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8911, &(0x7f0000000140)={'syztnl1\x00', 0x0}) 14:16:54 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x40, 0x2, 0x3, 0x40, @dev={0xfe, 0x80, '\x00', 0x3f}, @mcast2, 0x10, 0x40, 0xfffffffc, 0x80000000}}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x20}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x80d5}, 0x4c000) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r6) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fbdbdf25010000000e0001006e657464657673696d0000fc0e0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e3000000000"], 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r3) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r7, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c004}, 0xc811) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x40, 0x2, 0x3, 0x40, @dev={0xfe, 0x80, '\x00', 0x3f}, @mcast2, 0x10, 0x40, 0xfffffffc, 0x80000000}}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x20}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) (async) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x80d5}, 0x4c000) (async) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r6) (async) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fbdbdf25010000000e0001006e657464657673696d0000fc0e0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e3000000000"], 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r3) (async) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r7, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) (async) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c004}, 0xc811) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) 14:16:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:54 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8911, &(0x7f0000000140)={'syztnl1\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8911, &(0x7f0000000140)={'syztnl1\x00', 0x0}) (async) 14:16:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:54 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:54 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x15, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xea10f91b3020d8df}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x50, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xff}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x506}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x48084) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r3) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000000)=0x7) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:54 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x40, 0x2, 0x3, 0x40, @dev={0xfe, 0x80, '\x00', 0x3f}, @mcast2, 0x10, 0x40, 0xfffffffc, 0x80000000}}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x20}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x80d5}, 0x4c000) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r6) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fbdbdf25010000000e0001006e657464657673696d0000fc0e0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e3000000000"], 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) (async) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fbdbdf25010000000e0001006e657464657673696d0000fc0e0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e3000000000"], 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r3) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r7, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) (async) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r7, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c004}, 0xc811) socket$inet6_udp(0xa, 0x2, 0x0) 14:16:54 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) [ 1468.234639] audit: type=1326 audit(1677853014.684:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11664 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6adc000f9 code=0x0 14:16:55 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) 14:16:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) 14:16:55 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) 14:16:55 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) 14:16:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8000000000000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) 14:16:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) socketpair(0x15, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xea10f91b3020d8df}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x50, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xff}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x506}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x48084) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r3) (async) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000000)=0x7) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:55 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:56 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) 14:16:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8000000000000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8000000000000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x40) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) (async) 14:16:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r10}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r11}, {0x8, 0x1, r12}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r14) r15 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r15}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r12}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x15, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xea10f91b3020d8df}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x50, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xff}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x506}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x48084) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r3) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000000)=0x7) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) (async) socketpair(0x15, 0x2, 0x0, &(0x7f0000000480)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xea10f91b3020d8df}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x50, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xff}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x506}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x48084) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r3) (async) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000000)=0x7) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) 14:16:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:56 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8000000000000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8000000000000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x40) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) (async) [ 1469.854320] audit: type=1326 audit(1677853016.304:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11757 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6adc000f9 code=0x0 14:16:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:56 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x8, 0x401, 0x20, {{0x7, 0x4, 0x0, 0x6, 0x1c, 0x66, 0x0, 0x9, 0x4, 0x0, @broadcast, @multicast2, {[@noop, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', r2, 0x2f, 0x0, 0xe3, 0x4, 0x48, @mcast2, @mcast1, 0x10, 0x80, 0x1cc, 0xacb432d}}) 14:16:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r10}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r11}, {0x8, 0x1, r12}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r14) r15 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r15}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r12}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:57 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) 14:16:57 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x8, 0x401, 0x20, {{0x7, 0x4, 0x0, 0x6, 0x1c, 0x66, 0x0, 0x9, 0x4, 0x0, @broadcast, @multicast2, {[@noop, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', r2, 0x2f, 0x0, 0xe3, 0x4, 0x48, @mcast2, @mcast1, 0x10, 0x80, 0x1cc, 0xacb432d}}) 14:16:57 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r10}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r11}, {0x8, 0x1, r12}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r14) r15 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r15}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r12}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:57 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r10}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r11}, {0x8, 0x1, r12}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r14) r15 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r15}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r12}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x8, 0x401, 0x20, {{0x7, 0x4, 0x0, 0x6, 0x1c, 0x66, 0x0, 0x9, 0x4, 0x0, @broadcast, @multicast2, {[@noop, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', r2, 0x2f, 0x0, 0xe3, 0x4, 0x48, @mcast2, @mcast1, 0x10, 0x80, 0x1cc, 0xacb432d}}) 14:16:57 executing program 5: ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)=0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:57 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:57 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:58 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x135040, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000140)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r3) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc884}, 0x1) 14:16:58 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0041, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x3}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:58 executing program 5: ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)=0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r10}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r11}, {0x8, 0x1, r12}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r14) r15 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r15}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r12}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:58 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:58 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:58 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:58 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0041, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x3}) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:58 executing program 5: ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)=0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) [ 1471.709241] nla_parse: 32 callbacks suppressed [ 1471.709252] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1471.735775] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:16:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800001a478534144fe2289bee102ed892cd3bd9d070325ea92e17b7eff61f8cd443df305513b1ee09bb18c3ea46269deded219f57cd3acc66b6a79a34f0a11fce7be8ac33a12e747e7f937efa76dc01ed260f7f8e2b0ae0972916b62d6805bbcd627323361d65b4ec7f627320dc8e79e99c792800b859248a80eff1de8a5f8343e385ff28c1420cba90bc11328ff7312d6a61aba1482500000000000000", @ANYRES16=r4, @ANYBLOB="000425bd7000fcdbdf250100000005000400020000000900030073797a31000000000900010073797a320000000005000400010000000900030073797a31000000000500040001000000140002007767300000000000000000000000000005000400010000000900010073797a3100000000"], 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r3) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20044800) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r5, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffffa}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x80) 14:16:58 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0041, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x3}) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r10}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r11}, {0x8, 0x1, r12}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r14) r15 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r15}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r12}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 1471.841698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1471.877200] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1471.987383] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1471.996493] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:16:58 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000380)={{&(0x7f0000000300)={'KERNEL\x00', {&(0x7f0000000180)=@adf_dec={@bank={'Bank', '3', 'InterruptCoalescingTimerNs\x00'}, {0x7}, {&(0x7f0000000000)=@adf_hex={@format={'Dc', '0', 'RingSymRx\x00'}, {0x3a4}}}}}, {&(0x7f00000000c0)={'Accelerator1\x00', {&(0x7f0000000240)=@adf_str={@bank={'Bank', '1', 'CoreAffinity\x00'}, {"2bab82778c72470ce4ae9ceac39a2aff7f382995b8125ce9e04cf82fdefef1ba8566e82aec9cf3c377097c2aec68bb115d232ca3fcfbecf7e5a1fae7c1ba32e5"}}}}}}}, 0x5}) 14:16:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) (async) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800001a478534144fe2289bee102ed892cd3bd9d070325ea92e17b7eff61f8cd443df305513b1ee09bb18c3ea46269deded219f57cd3acc66b6a79a34f0a11fce7be8ac33a12e747e7f937efa76dc01ed260f7f8e2b0ae0972916b62d6805bbcd627323361d65b4ec7f627320dc8e79e99c792800b859248a80eff1de8a5f8343e385ff28c1420cba90bc11328ff7312d6a61aba1482500000000000000", @ANYRES16=r4, @ANYBLOB="000425bd7000fcdbdf250100000005000400020000000900030073797a31000000000900010073797a320000000005000400010000000900030073797a31000000000500040001000000140002007767300000000000000000000000000005000400010000000900010073797a3100000000"], 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) (async, rerun: 64) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r3) (rerun: 64) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20044800) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r5, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffffa}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x80) 14:16:58 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x135040, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000140)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r3) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc884}, 0x1) socket$l2tp(0x2, 0x2, 0x73) (async) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x135040, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000140)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r3) (async) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) (async) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc884}, 0x1) (async) 14:16:58 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:58 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000380)={{&(0x7f0000000300)={'KERNEL\x00', {&(0x7f0000000180)=@adf_dec={@bank={'Bank', '3', 'InterruptCoalescingTimerNs\x00'}, {0x7}, {&(0x7f0000000000)=@adf_hex={@format={'Dc', '0', 'RingSymRx\x00'}, {0x3a4}}}}}, {&(0x7f00000000c0)={'Accelerator1\x00', {&(0x7f0000000240)=@adf_str={@bank={'Bank', '1', 'CoreAffinity\x00'}, {"2bab82778c72470ce4ae9ceac39a2aff7f382995b8125ce9e04cf82fdefef1ba8566e82aec9cf3c377097c2aec68bb115d232ca3fcfbecf7e5a1fae7c1ba32e5"}}}}}}}, 0x5}) 14:16:59 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000380)={{&(0x7f0000000300)={'KERNEL\x00', {&(0x7f0000000180)=@adf_dec={@bank={'Bank', '3', 'InterruptCoalescingTimerNs\x00'}, {0x7}, {&(0x7f0000000000)=@adf_hex={@format={'Dc', '0', 'RingSymRx\x00'}, {0x3a4}}}}}, {&(0x7f00000000c0)={'Accelerator1\x00', {&(0x7f0000000240)=@adf_str={@bank={'Bank', '1', 'CoreAffinity\x00'}, {"2bab82778c72470ce4ae9ceac39a2aff7f382995b8125ce9e04cf82fdefef1ba8566e82aec9cf3c377097c2aec68bb115d232ca3fcfbecf7e5a1fae7c1ba32e5"}}}}}}}, 0x5}) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000380)={{&(0x7f0000000300)={'KERNEL\x00', {&(0x7f0000000180)=@adf_dec={@bank={'Bank', '3', 'InterruptCoalescingTimerNs\x00'}, {0x7}, {&(0x7f0000000000)=@adf_hex={@format={'Dc', '0', 'RingSymRx\x00'}, {0x3a4}}}}}, {&(0x7f00000000c0)={'Accelerator1\x00', {&(0x7f0000000240)=@adf_str={@bank={'Bank', '1', 'CoreAffinity\x00'}, {"2bab82778c72470ce4ae9ceac39a2aff7f382995b8125ce9e04cf82fdefef1ba8566e82aec9cf3c377097c2aec68bb115d232ca3fcfbecf7e5a1fae7c1ba32e5"}}}}}}}, 0x5}) [ 1472.628875] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1472.656351] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 14:16:59 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:59 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x135040, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000140)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r3) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc884}, 0x1) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc884}, 0x1) 14:16:59 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) [ 1472.773932] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1472.797773] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:16:59 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800001a478534144fe2289bee102ed892cd3bd9d070325ea92e17b7eff61f8cd443df305513b1ee09bb18c3ea46269deded219f57cd3acc66b6a79a34f0a11fce7be8ac33a12e747e7f937efa76dc01ed260f7f8e2b0ae0972916b62d6805bbcd627323361d65b4ec7f627320dc8e79e99c792800b859248a80eff1de8a5f8343e385ff28c1420cba90bc11328ff7312d6a61aba1482500000000000000", @ANYRES16=r4, @ANYBLOB="000425bd7000fcdbdf250100000005000400020000000900030073797a31000000000900010073797a320000000005000400010000000900030073797a31000000000500040001000000140002007767300000000000000000000000000005000400010000000900010073797a3100000000"], 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r3) (async) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20044800) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r5, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffffa}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x80) 14:16:59 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:16:59 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:16:59 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:16:59 executing program 3: socketpair(0x11, 0x5, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) getsockname$unix(r1, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) getsockname$llc(r2, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000200)=0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="0000000068ae69d96e44a951a3666e91fd08c5c854c0f261f57c9d66936849176f", @ANYRES16=0x0, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40001) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x2, 0x5}}, './file0\x00'}) connect$llc(r3, &(0x7f0000000340)={0x1a, 0x305, 0x40, 0x0, 0x2, 0x7f}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r4) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd4, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x44000}, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:16:59 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:17:00 executing program 0: recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/key-users\x00', 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="01f70000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000"]) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0xffffffff, 0x80000000}}, './file0\x00'}) r5 = getpgrp(0x0) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000100)={r5}) sendto$l2tp(r1, 0x0, 0x0, 0x4000880, &(0x7f0000000000)={0x2, 0x0, @loopback, 0x3}, 0x10) 14:17:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:17:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:17:00 executing program 3: socketpair(0x11, 0x5, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) (async) getsockname$unix(r1, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) (async) getsockname$llc(r2, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000200)=0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="0000000068ae69d96e44a951a3666e91fd08c5c854c0f261f57c9d66936849176f", @ANYRES16=0x0, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40001) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x2, 0x5}}, './file0\x00'}) connect$llc(r3, &(0x7f0000000340)={0x1a, 0x305, 0x40, 0x0, 0x2, 0x7f}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r4) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd4, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x44000}, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:17:00 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x40}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:17:00 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:17:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000000) 14:17:00 executing program 0: recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/key-users\x00', 0x0, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="01f70000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000"]) (async) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0xffffffff, 0x80000000}}, './file0\x00'}) (async) r5 = getpgrp(0x0) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000100)={r5}) (async) sendto$l2tp(r1, 0x0, 0x0, 0x4000880, &(0x7f0000000000)={0x2, 0x0, @loopback, 0x3}, 0x10) 14:17:00 executing program 3: socketpair(0x11, 0x5, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) (async) getsockname$unix(r1, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) (async) getsockname$llc(r2, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000200)=0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="0000000068ae69d96e44a951a3666e91fd08c5c854c0f261f57c9d66936849176f", @ANYRES16=0x0, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40001) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x2, 0x5}}, './file0\x00'}) connect$llc(r3, &(0x7f0000000340)={0x1a, 0x305, 0x40, 0x0, 0x2, 0x7f}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r4) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd4, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x44000}, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:17:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'syztnl1\x00', 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x24}}, 0x4004041) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000100}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000c4", @ANYRES16=0x0, @ANYBLOB="020100000000fedbdf250800000008000b000100000005002100000000000ca686a0f5001000d90800000000000008001900ac1414bb05000600050000000500220000000000050014000000030000000500060001000000c62e35a7bd069f0c3de713b71da541836fe2a61124d2671604ed7270613d79a53ecae8b777758d9c0b5a"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40810) 14:17:00 executing program 0: recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/key-users\x00', 0x0, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="01f70000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000"]) (async) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0xffffffff, 0x80000000}}, './file0\x00'}) (async) r5 = getpgrp(0x0) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000100)={r5}) (async) sendto$l2tp(r1, 0x0, 0x0, 0x4000880, &(0x7f0000000000)={0x2, 0x0, @loopback, 0x3}, 0x10) 14:17:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000000) 14:17:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:17:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:17:00 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x40}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:17:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'syztnl1\x00', 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x24}}, 0x4004041) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) (async) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000100}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000c4", @ANYRES16=0x0, @ANYBLOB="020100000000fedbdf250800000008000b000100000005002100000000000ca686a0f5001000d90800000000000008001900ac1414bb05000600050000000500220000000000050014000000030000000500060001000000c62e35a7bd069f0c3de713b71da541836fe2a61124d2671604ed7270613d79a53ecae8b777758d9c0b5a"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40810) 14:17:00 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @empty, 0x400000}, 0x10) 14:17:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000000) 14:17:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:17:00 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x40}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:17:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:17:00 executing program 5: clock_gettime(0x4, &(0x7f0000000000)) 14:17:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:17:00 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'syztnl1\x00', 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x24}}, 0x4004041) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x24}}, 0x4004041) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000100}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000c4", @ANYRES16=0x0, @ANYBLOB="020100000000fedbdf250800000008000b000100000005002100000000000ca686a0f5001000d90800000000000008001900ac1414bb05000600050000000500220000000000050014000000030000000500060001000000c62e35a7bd069f0c3de713b71da541836fe2a61124d2671604ed7270613d79a53ecae8b777758d9c0b5a"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40810) (async) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000100}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000c4", @ANYRES16=0x0, @ANYBLOB="020100000000fedbdf250800000008000b000100000005002100000000000ca686a0f5001000d90800000000000008001900ac1414bb05000600050000000500220000000000050014000000030000000500060001000000c62e35a7bd069f0c3de713b71da541836fe2a61124d2671604ed7270613d79a53ecae8b777758d9c0b5a"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40810) 14:17:00 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:17:00 executing program 5: clock_gettime(0x4, &(0x7f0000000000)) 14:17:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:17:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000003fc0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000006cc0)={0x2, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x2, 0x1, 0x2, @private1={0xfc, 0x1, '\x00', 0xfe}, @mcast1, 0x40, 0x20, 0x7, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB='s\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="7800780000000000fffffffd4e2e00380064000081299078e0000002640101000713efac1414aaac1414bb7f000001e0000002070ffa0a0101000a010102e00000020100"]}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000200)="4637aab4ebb1615a43b4c3a9a564d843a77befc8eb0c4f77da540c20e8cc86cd55ae4fa42fef52a474e645519f98e75d85eb767c12ba6517681233985dc2dd621e09a98f9dc574e031bdf62bdb47da6ca520996b61179538b59839f3551e0e3fd82f51f5e3bd526f6dbee3f5814b4fcc21d1637188a54c1588e514fd6dbcba6475db9f9e6d6f01f2af1ef79b3b6613a137554e33c37d4aef56b3d7786a7bd958dd9e22700b23055c44990959067b3f3858c4f026d33e3694c716f7573650d7114c6779fd0228cbcd4a28c5", 0xcb}) get_robust_list(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x18) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r3) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xa78}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x14}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x81}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8000}]}, 0x5c}}, 0x40000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000700)={&(0x7f0000000640)="794c49c648ee3ec68c3075654e917a0e7254231f28db1c05440ad92d64dd99c663e481eded5061a4b2dc44cae6229ad9709d3a4a2fcfdb1ba2d04036d239aa1c7e94e9074045f2049636083987e2aef372587c50ad1eb3a37684318bfa5d41ae2bcbc108b9e4915738982d70e9a725224a50199e846a2af2a5dda979783481b946e635b39edf8a588c83f27a3e6bdb7507582f410bfe450ea060c7199ed5fb365a92b7c1b468aeb5f058a8160e", 0xad}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002abd7000fcdbdf25020000000c0010008f010000000000000600010007000000050005000100000008001700", @ANYRES32=r3, @ANYBLOB="05000600720f0000140008006970365f767469300000000000000000be9d4392572ba4ed18dc594f606883fa0260ac38fcc1f7b22d2831e25d6d6ed5b8e04fa92539b2aecf2fb7d6c99e138b93b78e35d7b449763f04693366"], 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x404c084) 14:17:01 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @empty, 0x400000}, 0x10) 14:17:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:17:01 executing program 5: clock_gettime(0x4, &(0x7f0000000000)) 14:17:01 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:17:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000003fc0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000006cc0)={0x2, 0x0, 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x2, 0x1, 0x2, @private1={0xfc, 0x1, '\x00', 0xfe}, @mcast1, 0x40, 0x20, 0x7, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB='s\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="7800780000000000fffffffd4e2e00380064000081299078e0000002640101000713efac1414aaac1414bb7f000001e0000002070ffa0a0101000a010102e00000020100"]}) (async) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000200)="4637aab4ebb1615a43b4c3a9a564d843a77befc8eb0c4f77da540c20e8cc86cd55ae4fa42fef52a474e645519f98e75d85eb767c12ba6517681233985dc2dd621e09a98f9dc574e031bdf62bdb47da6ca520996b61179538b59839f3551e0e3fd82f51f5e3bd526f6dbee3f5814b4fcc21d1637188a54c1588e514fd6dbcba6475db9f9e6d6f01f2af1ef79b3b6613a137554e33c37d4aef56b3d7786a7bd958dd9e22700b23055c44990959067b3f3858c4f026d33e3694c716f7573650d7114c6779fd0228cbcd4a28c5", 0xcb}) (async) get_robust_list(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x18) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r3) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xa78}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x14}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x81}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8000}]}, 0x5c}}, 0x40000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000700)={&(0x7f0000000640)="794c49c648ee3ec68c3075654e917a0e7254231f28db1c05440ad92d64dd99c663e481eded5061a4b2dc44cae6229ad9709d3a4a2fcfdb1ba2d04036d239aa1c7e94e9074045f2049636083987e2aef372587c50ad1eb3a37684318bfa5d41ae2bcbc108b9e4915738982d70e9a725224a50199e846a2af2a5dda979783481b946e635b39edf8a588c83f27a3e6bdb7507582f410bfe450ea060c7199ed5fb365a92b7c1b468aeb5f058a8160e", 0xad}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002abd7000fcdbdf25020000000c0010008f010000000000000600010007000000050005000100000008001700", @ANYRES32=r3, @ANYBLOB="05000600720f0000140008006970365f767469300000000000000000be9d4392572ba4ed18dc594f606883fa0260ac38fcc1f7b22d2831e25d6d6ed5b8e04fa92539b2aecf2fb7d6c99e138b93b78e35d7b449763f04693366"], 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x404c084) 14:17:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:17:01 executing program 5: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0x40, 0x1, 0x6, 0x16, @private1, @mcast1, 0x8, 0x0, 0xffff, 0x101}}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendto$l2tp(r1, &(0x7f0000000040)="3dbc1484a1894bd54d02edb3a7ab0023bbeedd85cecc93812549f8209823b0b12ed30f286572e967243f35ca91de2285ecd9274bf6003df775", 0x39, 0x401c041, &(0x7f0000000080)={0x2, 0x0, @remote, 0x1}, 0x10) 14:17:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000003fc0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000006cc0)={0x2, 0x0, 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x2, 0x1, 0x2, @private1={0xfc, 0x1, '\x00', 0xfe}, @mcast1, 0x40, 0x20, 0x7, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB='s\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="7800780000000000fffffffd4e2e00380064000081299078e0000002640101000713efac1414aaac1414bb7f000001e0000002070ffa0a0101000a010102e00000020100"]}) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000200)="4637aab4ebb1615a43b4c3a9a564d843a77befc8eb0c4f77da540c20e8cc86cd55ae4fa42fef52a474e645519f98e75d85eb767c12ba6517681233985dc2dd621e09a98f9dc574e031bdf62bdb47da6ca520996b61179538b59839f3551e0e3fd82f51f5e3bd526f6dbee3f5814b4fcc21d1637188a54c1588e514fd6dbcba6475db9f9e6d6f01f2af1ef79b3b6613a137554e33c37d4aef56b3d7786a7bd958dd9e22700b23055c44990959067b3f3858c4f026d33e3694c716f7573650d7114c6779fd0228cbcd4a28c5", 0xcb}) (async) get_robust_list(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x18) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r3) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xa78}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x14}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x81}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8000}]}, 0x5c}}, 0x40000) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000700)={&(0x7f0000000640)="794c49c648ee3ec68c3075654e917a0e7254231f28db1c05440ad92d64dd99c663e481eded5061a4b2dc44cae6229ad9709d3a4a2fcfdb1ba2d04036d239aa1c7e94e9074045f2049636083987e2aef372587c50ad1eb3a37684318bfa5d41ae2bcbc108b9e4915738982d70e9a725224a50199e846a2af2a5dda979783481b946e635b39edf8a588c83f27a3e6bdb7507582f410bfe450ea060c7199ed5fb365a92b7c1b468aeb5f058a8160e", 0xad}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002abd7000fcdbdf25020000000c0010008f010000000000000600010007000000050005000100000008001700", @ANYRES32=r3, @ANYBLOB="05000600720f0000140008006970365f767469300000000000000000be9d4392572ba4ed18dc594f606883fa0260ac38fcc1f7b22d2831e25d6d6ed5b8e04fa92539b2aecf2fb7d6c99e138b93b78e35d7b449763f04693366"], 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x404c084) 14:17:01 executing program 5: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0x40, 0x1, 0x6, 0x16, @private1, @mcast1, 0x8, 0x0, 0xffff, 0x101}}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendto$l2tp(r1, &(0x7f0000000040)="3dbc1484a1894bd54d02edb3a7ab0023bbeedd85cecc93812549f8209823b0b12ed30f286572e967243f35ca91de2285ecd9274bf6003df775", 0x39, 0x401c041, &(0x7f0000000080)={0x2, 0x0, @remote, 0x1}, 0x10) 14:17:01 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:17:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:17:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:17:02 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @empty, 0x400000}, 0x10) 14:17:02 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x20008841) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:17:02 executing program 5: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0x40, 0x1, 0x6, 0x16, @private1, @mcast1, 0x8, 0x0, 0xffff, 0x101}}) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) (async, rerun: 64) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (async, rerun: 64) sendto$l2tp(r1, &(0x7f0000000040)="3dbc1484a1894bd54d02edb3a7ab0023bbeedd85cecc93812549f8209823b0b12ed30f286572e967243f35ca91de2285ecd9274bf6003df775", 0x39, 0x401c041, &(0x7f0000000080)={0x2, 0x0, @remote, 0x1}, 0x10) 14:17:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:17:02 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x40}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:17:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:17:02 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x20008841) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:17:02 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x48000) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000180)) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x80) 14:17:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:17:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:17:02 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x40}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) [ 1476.134241] nbd: must specify a size in bytes for the device 14:17:02 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x20008841) (rerun: 64) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) [ 1476.311105] nbd: must specify a size in bytes for the device 14:17:03 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) getsockname$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) 14:17:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x48000) (async) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000180)) (async) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x80) 14:17:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r3) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 14:17:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:17:03 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x40}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:17:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 1476.988412] nla_parse: 50 callbacks suppressed [ 1476.988422] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1477.005052] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 14:17:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x48000) (async) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000180)) (async) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x80) 14:17:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r12}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:17:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r3) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r3) (async) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) (async) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) (async) [ 1477.059219] nbd: must specify a size in bytes for the device 14:17:03 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x38}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) [ 1477.108249] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1477.150355] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:17:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x8911, &(0x7f0000000140)={'syztnl2\x00', 0x0}) 14:17:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 1477.260209] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1477.293474] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1477.315648] nbd: must specify at least one socket [ 1477.378358] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1477.392114] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:17:04 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) (async) getsockname$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) 14:17:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r3) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44811}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r3) (async) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x84) (async) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x1) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) (async) 14:17:04 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x38}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:17:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:17:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) (async, rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x8911, &(0x7f0000000140)={'syztnl2\x00', 0x0}) 14:17:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 1477.904912] nbd: must specify at least one socket 14:17:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x8911, &(0x7f0000000140)={'syztnl2\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x8911, &(0x7f0000000140)={'syztnl2\x00', 0x0}) (async) 14:17:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) [ 1477.928157] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1477.948226] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 14:17:04 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x38}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:17:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:17:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:17:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 1478.123102] nbd: must specify at least one socket 14:17:05 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) getsockname$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) socket$l2tp(0x2, 0x2, 0x73) (async) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev}, 0x10) (async) getsockname$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) (async) 14:17:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:17:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:17:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:17:05 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x44}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:17:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:17:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 14:17:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) 14:17:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x58, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x100}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3f}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x20}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x14) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x50, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x77b0a37d}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'lo\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000804}, 0x40040) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000380)=""/106, 0x6a}, {&(0x7f0000000400)=""/125, 0x7d}], 0x2, &(0x7f00000004c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000000680)=""/202, 0xca}, {&(0x7f0000000780)=""/244, 0xf4}, {&(0x7f0000000880)=""/203, 0xcb}, {&(0x7f0000000980)=""/9, 0x9}], 0x5, &(0x7f0000000a40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000b00)=""/70, 0x46}, {&(0x7f0000000b80)=""/100, 0x64}, {&(0x7f0000000c00)=""/146, 0x92}, {&(0x7f0000000cc0)=""/6, 0x6}, {&(0x7f0000000d00)=""/144, 0x90}], 0x5, &(0x7f0000000e40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}], 0x3, 0x0, 0x0) 14:17:05 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x44}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:17:05 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) sendmsg$802154_dgram(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000080)={&(0x7f0000000040)="52bf3f287fb9", 0x6}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00008000000000002e2f66696c653000"]) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f00000007c0)={{&(0x7f0000000740)={'Accelerator0\x00', {&(0x7f0000000480)=@adf_str={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {"abe1c9795e03db0432d0610208387dc6e59a8a34a315593af7b6ccc0bfba3270b2f5f3105649960405c1d91e10917cce7d159ab57d1e7aeda267dd235938d07c"}, {&(0x7f00000003c0)=@adf_str={@format={'Cy', '5', 'RingRx\x00'}, {"1d427b75a497822aed1b4de2156e111b1997ef7eae49f5bb310d3d47e4a055f4a616afddaec6b1df32e5bc61f5b3265480be14b3a7dec4e0f59967d276a6fcb3"}}}}}, {&(0x7f00000006c0)={'Accelerator0\x00', {&(0x7f0000000600)=@adf_str={@normal='NumberDcInstances\x00', {"ac9c835db93fde141ae3d122ba5094efa789ebdb269ee225810cd7fda69ffff99fe92a72ace70efd817ed144aaaa62a79f8015729e0c7a1307846baa666bbd14"}, {&(0x7f0000000540)=@adf_dec={@normal='NumberCyInstances\x00', {0x80000000}}}}}}}}}, 0x8}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r3) sendmsg$802154_dgram(r3, &(0x7f00000009c0)={&(0x7f0000000800)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000980)={&(0x7f0000000840)="323c6b491e9656e95b523c8b6601ef55afbdc1c9ef58c4ef773190dc20661f0e59267f4fe88a97e92abc7afb50a1b0e8b6e7433dacea5f86f5f97156753db3a435c570695ee104695ac00a1a58f6d6a31080ccbbbab4b101620b3098018a7aceec5070514620633d9850cb43fa3c7b3e1db429dab6d03758210d65afd6f69b88f91df949210f2db9523d33402b2cb41e28c830dee73c733fad8b757b908133fad3d1f1b3c4c12dcf9ad5721500c5e642e668973af12507fd0ae34c1393d7bf802abc29a70e63a26fe5c9d97d078ad6442578eed49b2256d3bf41768f6076948dd194411a67cb6c02142cbafb886a49c7b8f24e1a493bd8", 0xf7}, 0x1, 0x0, 0x0, 0x20000080}, 0x14080) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x6c, 0x0, &(0x7f0000000280)=[@decrefs, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/67, 0x43, 0x2, 0x6}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x3}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x40}, @release={0x40046306, 0x3}, @exit_looper, @free_buffer], 0x61, 0x0, &(0x7f0000000300)="fa3e6826c4b70b0c367f5531f2ef442c1d6935b4924c91f8b27443ddadbfa4a8214ed16c89789267e569ed5c3b135e3a8d9b056dba38619d6c03dc8653521f41b7f1e58ccb8ba56c744a348abed71a7c0f65365aeacdd0f1c28cbbd9a3eb876a8d"}) socket$inet6_udp(0xa, 0x2, 0x0) 14:17:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r10}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r11}, {0x8, 0x1, r12}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r14) r15 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r15}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r12}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:17:06 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x4004041, &(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x15}, 0x40) 14:17:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) 14:17:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x58, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x100}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3f}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x20}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x14) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x50, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x77b0a37d}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'lo\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000804}, 0x40040) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000380)=""/106, 0x6a}, {&(0x7f0000000400)=""/125, 0x7d}], 0x2, &(0x7f00000004c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000000680)=""/202, 0xca}, {&(0x7f0000000780)=""/244, 0xf4}, {&(0x7f0000000880)=""/203, 0xcb}, {&(0x7f0000000980)=""/9, 0x9}], 0x5, &(0x7f0000000a40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000b00)=""/70, 0x46}, {&(0x7f0000000b80)=""/100, 0x64}, {&(0x7f0000000c00)=""/146, 0x92}, {&(0x7f0000000cc0)=""/6, 0x6}, {&(0x7f0000000d00)=""/144, 0x90}], 0x5, &(0x7f0000000e40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}], 0x3, 0x0, 0x0) 14:17:06 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) sendmsg$802154_dgram(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000080)={&(0x7f0000000040)="52bf3f287fb9", 0x6}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00008000000000002e2f66696c653000"]) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f00000007c0)={{&(0x7f0000000740)={'Accelerator0\x00', {&(0x7f0000000480)=@adf_str={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {"abe1c9795e03db0432d0610208387dc6e59a8a34a315593af7b6ccc0bfba3270b2f5f3105649960405c1d91e10917cce7d159ab57d1e7aeda267dd235938d07c"}, {&(0x7f00000003c0)=@adf_str={@format={'Cy', '5', 'RingRx\x00'}, {"1d427b75a497822aed1b4de2156e111b1997ef7eae49f5bb310d3d47e4a055f4a616afddaec6b1df32e5bc61f5b3265480be14b3a7dec4e0f59967d276a6fcb3"}}}}}, {&(0x7f00000006c0)={'Accelerator0\x00', {&(0x7f0000000600)=@adf_str={@normal='NumberDcInstances\x00', {"ac9c835db93fde141ae3d122ba5094efa789ebdb269ee225810cd7fda69ffff99fe92a72ace70efd817ed144aaaa62a79f8015729e0c7a1307846baa666bbd14"}, {&(0x7f0000000540)=@adf_dec={@normal='NumberCyInstances\x00', {0x80000000}}}}}}}}}, 0x8}) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r3) (async) sendmsg$802154_dgram(r3, &(0x7f00000009c0)={&(0x7f0000000800)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000980)={&(0x7f0000000840)="323c6b491e9656e95b523c8b6601ef55afbdc1c9ef58c4ef773190dc20661f0e59267f4fe88a97e92abc7afb50a1b0e8b6e7433dacea5f86f5f97156753db3a435c570695ee104695ac00a1a58f6d6a31080ccbbbab4b101620b3098018a7aceec5070514620633d9850cb43fa3c7b3e1db429dab6d03758210d65afd6f69b88f91df949210f2db9523d33402b2cb41e28c830dee73c733fad8b757b908133fad3d1f1b3c4c12dcf9ad5721500c5e642e668973af12507fd0ae34c1393d7bf802abc29a70e63a26fe5c9d97d078ad6442578eed49b2256d3bf41768f6076948dd194411a67cb6c02142cbafb886a49c7b8f24e1a493bd8", 0xf7}, 0x1, 0x0, 0x0, 0x20000080}, 0x14080) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x6c, 0x0, &(0x7f0000000280)=[@decrefs, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/67, 0x43, 0x2, 0x6}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x3}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x40}, @release={0x40046306, 0x3}, @exit_looper, @free_buffer], 0x61, 0x0, &(0x7f0000000300)="fa3e6826c4b70b0c367f5531f2ef442c1d6935b4924c91f8b27443ddadbfa4a8214ed16c89789267e569ed5c3b135e3a8d9b056dba38619d6c03dc8653521f41b7f1e58ccb8ba56c744a348abed71a7c0f65365aeacdd0f1c28cbbd9a3eb876a8d"}) (async) socket$inet6_udp(0xa, 0x2, 0x0) 14:17:06 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x3c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), 0xffffffffffffffff) 14:17:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r10}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r11}, {0x8, 0x1, r12}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r14) r15 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="852a6277000000000000000000000000000000000000000085616466000061e4c18279c5cb5a00000200000000003f001800000000000000852a62730a00000001000000000000000000000000000000375116661e94160fb3ef52c14d4d6d67b543af538e49a91c7204c3266502d1a3ff214d4c3ff88a4c81481cf6db47e4c02b0a3a2ed8a6f128dd095c48c6feb8f7d9fa5bf27a8773fb9f4b4f747d0d8141bea012903e9817e7ef484e28cc65f99dee1c3fbdacb06e819cf64cd6697f31f8ad6236fa2704d142802fbfc16c502036f094220f4be2bb3c71908f5a4d0094b5828a00275c0bd9a3194a2672e2ce3b3ad2073a77f88b334319b2579a820587cb3fac8046243c261a4c0ae4d1caae75016d0f90cf3b2319f22a6956d89dcd492fbe7ab33820092eefeaba"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r15}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r12}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:17:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x58, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x100}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3f}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x20}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x14) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x50, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x77b0a37d}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'lo\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000804}, 0x40040) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000380)=""/106, 0x6a}, {&(0x7f0000000400)=""/125, 0x7d}], 0x2, &(0x7f00000004c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000000680)=""/202, 0xca}, {&(0x7f0000000780)=""/244, 0xf4}, {&(0x7f0000000880)=""/203, 0xcb}, {&(0x7f0000000980)=""/9, 0x9}], 0x5, &(0x7f0000000a40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000b00)=""/70, 0x46}, {&(0x7f0000000b80)=""/100, 0x64}, {&(0x7f0000000c00)=""/146, 0x92}, {&(0x7f0000000cc0)=""/6, 0x6}, {&(0x7f0000000d00)=""/144, 0x90}], 0x5, &(0x7f0000000e40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}], 0x3, 0x0, 0x0) 14:17:06 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) sendmsg$802154_dgram(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000080)={&(0x7f0000000040)="52bf3f287fb9", 0x6}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00008000000000002e2f66696c653000"]) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f00000007c0)={{&(0x7f0000000740)={'Accelerator0\x00', {&(0x7f0000000480)=@adf_str={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {"abe1c9795e03db0432d0610208387dc6e59a8a34a315593af7b6ccc0bfba3270b2f5f3105649960405c1d91e10917cce7d159ab57d1e7aeda267dd235938d07c"}, {&(0x7f00000003c0)=@adf_str={@format={'Cy', '5', 'RingRx\x00'}, {"1d427b75a497822aed1b4de2156e111b1997ef7eae49f5bb310d3d47e4a055f4a616afddaec6b1df32e5bc61f5b3265480be14b3a7dec4e0f59967d276a6fcb3"}}}}}, {&(0x7f00000006c0)={'Accelerator0\x00', {&(0x7f0000000600)=@adf_str={@normal='NumberDcInstances\x00', {"ac9c835db93fde141ae3d122ba5094efa789ebdb269ee225810cd7fda69ffff99fe92a72ace70efd817ed144aaaa62a79f8015729e0c7a1307846baa666bbd14"}, {&(0x7f0000000540)=@adf_dec={@normal='NumberCyInstances\x00', {0x80000000}}}}}}}}}, 0x8}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r3) sendmsg$802154_dgram(r3, &(0x7f00000009c0)={&(0x7f0000000800)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000980)={&(0x7f0000000840)="323c6b491e9656e95b523c8b6601ef55afbdc1c9ef58c4ef773190dc20661f0e59267f4fe88a97e92abc7afb50a1b0e8b6e7433dacea5f86f5f97156753db3a435c570695ee104695ac00a1a58f6d6a31080ccbbbab4b101620b3098018a7aceec5070514620633d9850cb43fa3c7b3e1db429dab6d03758210d65afd6f69b88f91df949210f2db9523d33402b2cb41e28c830dee73c733fad8b757b908133fad3d1f1b3c4c12dcf9ad5721500c5e642e668973af12507fd0ae34c1393d7bf802abc29a70e63a26fe5c9d97d078ad6442578eed49b2256d3bf41768f6076948dd194411a67cb6c02142cbafb886a49c7b8f24e1a493bd8", 0xf7}, 0x1, 0x0, 0x0, 0x20000080}, 0x14080) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x6c, 0x0, &(0x7f0000000280)=[@decrefs, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/67, 0x43, 0x2, 0x6}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x3}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x40}, @release={0x40046306, 0x3}, @exit_looper, @free_buffer], 0x61, 0x0, &(0x7f0000000300)="fa3e6826c4b70b0c367f5531f2ef442c1d6935b4924c91f8b27443ddadbfa4a8214ed16c89789267e569ed5c3b135e3a8d9b056dba38619d6c03dc8653521f41b7f1e58ccb8ba56c744a348abed71a7c0f65365aeacdd0f1c28cbbd9a3eb876a8d"}) socket$inet6_udp(0xa, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) (async) sendmsg$802154_dgram(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000080)={&(0x7f0000000040)="52bf3f287fb9", 0x6}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00008000000000002e2f66696c653000"]) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f00000007c0)={{&(0x7f0000000740)={'Accelerator0\x00', {&(0x7f0000000480)=@adf_str={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {"abe1c9795e03db0432d0610208387dc6e59a8a34a315593af7b6ccc0bfba3270b2f5f3105649960405c1d91e10917cce7d159ab57d1e7aeda267dd235938d07c"}, {&(0x7f00000003c0)=@adf_str={@format={'Cy', '5', 'RingRx\x00'}, {"1d427b75a497822aed1b4de2156e111b1997ef7eae49f5bb310d3d47e4a055f4a616afddaec6b1df32e5bc61f5b3265480be14b3a7dec4e0f59967d276a6fcb3"}}}}}, {&(0x7f00000006c0)={'Accelerator0\x00', {&(0x7f0000000600)=@adf_str={@normal='NumberDcInstances\x00', {"ac9c835db93fde141ae3d122ba5094efa789ebdb269ee225810cd7fda69ffff99fe92a72ace70efd817ed144aaaa62a79f8015729e0c7a1307846baa666bbd14"}, {&(0x7f0000000540)=@adf_dec={@normal='NumberCyInstances\x00', {0x80000000}}}}}}}}}, 0x8}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r3) (async) sendmsg$802154_dgram(r3, &(0x7f00000009c0)={&(0x7f0000000800)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000980)={&(0x7f0000000840)="323c6b491e9656e95b523c8b6601ef55afbdc1c9ef58c4ef773190dc20661f0e59267f4fe88a97e92abc7afb50a1b0e8b6e7433dacea5f86f5f97156753db3a435c570695ee104695ac00a1a58f6d6a31080ccbbbab4b101620b3098018a7aceec5070514620633d9850cb43fa3c7b3e1db429dab6d03758210d65afd6f69b88f91df949210f2db9523d33402b2cb41e28c830dee73c733fad8b757b908133fad3d1f1b3c4c12dcf9ad5721500c5e642e668973af12507fd0ae34c1393d7bf802abc29a70e63a26fe5c9d97d078ad6442578eed49b2256d3bf41768f6076948dd194411a67cb6c02142cbafb886a49c7b8f24e1a493bd8", 0xf7}, 0x1, 0x0, 0x0, 0x20000080}, 0x14080) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x6c, 0x0, &(0x7f0000000280)=[@decrefs, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/67, 0x43, 0x2, 0x6}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x3}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x40}, @release={0x40046306, 0x3}, @exit_looper, @free_buffer], 0x61, 0x0, &(0x7f0000000300)="fa3e6826c4b70b0c367f5531f2ef442c1d6935b4924c91f8b27443ddadbfa4a8214ed16c89789267e569ed5c3b135e3a8d9b056dba38619d6c03dc8653521f41b7f1e58ccb8ba56c744a348abed71a7c0f65365aeacdd0f1c28cbbd9a3eb876a8d"}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) 14:17:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r10}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r11}, {0x8, 0x1, r12}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r14) r15 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r15}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r12}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:17:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa33}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x515020, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c5}, 0x200600c0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000804) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r12) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r13) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000f00)={0x168, 0x0, &(0x7f0000000d00)=[@increfs={0x40046304, 0x3}, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000ac0)={@fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/203, 0xcb, 0x1, 0x1b}}, &(0x7f0000000b40)={0x0, 0x20, 0x38}}}, @clear_death, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x5, 0x2, 0x1d}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000c40)={@fd={0x66642a85, 0x0, r14}, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000cc0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}], 0x26, 0x0, &(0x7f0000000e80)="deed23fb2fbebe7953f1f9a662a5e36830d75a881b9c458534015afdb261a7bed11c941208b3"}) [ 1479.961011] ================================================================== [ 1479.968576] BUG: KASAN: use-after-free in refcount_dec_not_one+0x71/0x1d0 [ 1479.975511] Read of size 4 at addr ffff8880ab545858 by task syz-executor.1/12587 [ 1479.983040] [ 1479.984673] CPU: 0 PID: 12587 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1479.992554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1480.001926] Call Trace: [ 1480.004520] dump_stack+0x1fc/0x2ef [ 1480.008164] print_address_description.cold+0x54/0x219 [ 1480.013454] kasan_report_error.cold+0x8a/0x1b9 [ 1480.018134] ? refcount_dec_not_one+0x71/0x1d0 [ 1480.022723] kasan_report+0x8f/0xa0 [ 1480.026361] ? refcount_dec_not_one+0x71/0x1d0 [ 1480.030954] refcount_dec_not_one+0x71/0x1d0 [ 1480.035371] ? refcount_dec_and_test_checked+0x20/0x20 [ 1480.040661] ? nbd_config_put+0x5da/0x870 [ 1480.044823] refcount_dec_and_mutex_lock+0x1c/0x80 [ 1480.049774] nbd_genl_connect+0x11ee/0x1630 [ 1480.054108] ? nbd_xmit_timeout+0x730/0x730 [ 1480.058434] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 1480.063634] ? validate_nla+0x270/0x820 [ 1480.067616] ? nla_parse+0x1b2/0x290 [ 1480.071343] genl_family_rcv_msg+0x642/0xc40 [ 1480.075760] ? genl_rcv+0x40/0x40 [ 1480.079219] ? genl_rcv_msg+0x12f/0x160 [ 1480.083198] ? mutex_trylock+0x1a0/0x1a0 [ 1480.087274] ? __radix_tree_lookup+0x216/0x370 [ 1480.091875] genl_rcv_msg+0xbf/0x160 [ 1480.095602] netlink_rcv_skb+0x160/0x440 [ 1480.099671] ? genl_family_rcv_msg+0xc40/0xc40 [ 1480.104265] ? netlink_ack+0xae0/0xae0 [ 1480.108161] ? genl_rcv+0x15/0x40 14:17:06 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000200)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x7, 0x0, 0x0, @mcast1, @empty, 0x7, 0x8000, 0x1, 0xffffffc6}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x80, 0x40, 0x4, 0x3, {{0x14, 0x4, 0x0, 0x1d, 0x50, 0x68, 0x0, 0x6, 0x29, 0x0, @multicast1, @remote, {[@lsrr={0x83, 0x7, 0x2b, [@loopback]}, @end, @rr={0x7, 0x17, 0xf7, [@empty, @local, @local, @loopback, @multicast2]}, @noop, @ssrr={0x89, 0x1b, 0xf1, [@broadcast, @local, @rand_addr=0x64010102, @loopback, @remote, @multicast1]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', r3, 0x2f, 0x0, 0x3f, 0x6, 0x40, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x20, 0x20, 0x2, 0x7fff}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl1\x00', r4, 0x29, 0x4, 0x0, 0x3, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x8, 0x8, 0x7, 0x1f}}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r5) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f00000003c0)) [ 1480.111628] genl_rcv+0x24/0x40 [ 1480.114926] netlink_unicast+0x4d5/0x690 [ 1480.118995] ? netlink_sendskb+0x110/0x110 [ 1480.123236] ? _copy_from_iter_full+0x229/0x7c0 [ 1480.127913] ? __phys_addr_symbol+0x2c/0x70 [ 1480.132243] ? __check_object_size+0x17b/0x3e0 [ 1480.136837] netlink_sendmsg+0x6c3/0xc50 [ 1480.140929] ? aa_af_perm+0x230/0x230 [ 1480.144736] ? nlmsg_notify+0x1f0/0x1f0 [ 1480.148713] ? kernel_recvmsg+0x220/0x220 [ 1480.152915] ? nlmsg_notify+0x1f0/0x1f0 [ 1480.156898] sock_sendmsg+0xc3/0x120 [ 1480.160622] ___sys_sendmsg+0x7bb/0x8e0 [ 1480.164608] ? lock_acquire+0x170/0x3c0 [ 1480.168588] ? copy_msghdr_from_user+0x440/0x440 [ 1480.173349] ? __fget+0x32f/0x510 [ 1480.176834] ? lock_downgrade+0x720/0x720 [ 1480.180992] ? check_preemption_disabled+0x41/0x280 [ 1480.186018] ? check_preemption_disabled+0x41/0x280 [ 1480.191042] ? __fget+0x356/0x510 [ 1480.194501] ? do_dup2+0x450/0x450 [ 1480.198044] ? debug_object_active_state+0x254/0x330 [ 1480.203154] ? debug_object_init_on_stack+0x20/0x20 [ 1480.208178] ? __fdget+0x1d0/0x230 14:17:06 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000200)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x7, 0x0, 0x0, @mcast1, @empty, 0x7, 0x8000, 0x1, 0xffffffc6}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x80, 0x40, 0x4, 0x3, {{0x14, 0x4, 0x0, 0x1d, 0x50, 0x68, 0x0, 0x6, 0x29, 0x0, @multicast1, @remote, {[@lsrr={0x83, 0x7, 0x2b, [@loopback]}, @end, @rr={0x7, 0x17, 0xf7, [@empty, @local, @local, @loopback, @multicast2]}, @noop, @ssrr={0x89, 0x1b, 0xf1, [@broadcast, @local, @rand_addr=0x64010102, @loopback, @remote, @multicast1]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', r3, 0x2f, 0x0, 0x3f, 0x6, 0x40, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x20, 0x20, 0x2, 0x7fff}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl1\x00', r4, 0x29, 0x4, 0x0, 0x3, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x8, 0x8, 0x7, 0x1f}}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r5) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f00000003c0)) socket$inet6_udp(0xa, 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000200)=0x1, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8911, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r2) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x7, 0x0, 0x0, @mcast1, @empty, 0x7, 0x8000, 0x1, 0xffffffc6}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000180)={'erspan0\x00', r3, 0x80, 0x40, 0x4, 0x3, {{0x14, 0x4, 0x0, 0x1d, 0x50, 0x68, 0x0, 0x6, 0x29, 0x0, @multicast1, @remote, {[@lsrr={0x83, 0x7, 0x2b, [@loopback]}, @end, @rr={0x7, 0x17, 0xf7, [@empty, @local, @local, @loopback, @multicast2]}, @noop, @ssrr={0x89, 0x1b, 0xf1, [@broadcast, @local, @rand_addr=0x64010102, @loopback, @remote, @multicast1]}, @end]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', r3, 0x2f, 0x0, 0x3f, 0x6, 0x40, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x20, 0x20, 0x2, 0x7fff}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl1\x00', r4, 0x29, 0x4, 0x0, 0x3, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x8, 0x8, 0x7, 0x1f}}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/asound/timers\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r5) (async) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f00000003c0)) (async) [ 1480.211740] __x64_sys_sendmsg+0x132/0x220 [ 1480.215979] ? __sys_sendmsg+0x1b0/0x1b0 [ 1480.220055] ? __se_sys_futex+0x298/0x3b0 [ 1480.224346] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1480.229722] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1480.234756] ? do_syscall_64+0x21/0x620 [ 1480.238744] do_syscall_64+0xf9/0x620 [ 1480.242560] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1480.247757] RIP: 0033:0x7f116aa900f9 [ 1480.251474] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1480.270383] RSP: 002b:00007f1169002168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1480.278105] RAX: ffffffffffffffda RBX: 00007f116abaff80 RCX: 00007f116aa900f9 [ 1480.285382] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 1480.292657] RBP: 00007f116aaebae9 R08: 0000000000000000 R09: 0000000000000000 [ 1480.299937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1480.307212] R13: 00007ffe7c5125af R14: 00007f1169002300 R15: 0000000000022000 [ 1480.314496] [ 1480.316124] Allocated by task 12583: [ 1480.319846] kmem_cache_alloc_trace+0x12f/0x380 [ 1480.324520] nbd_dev_add+0x44/0x890 [ 1480.328153] nbd_genl_connect+0x4cc/0x1630 [ 1480.332394] genl_family_rcv_msg+0x642/0xc40 [ 1480.336804] genl_rcv_msg+0xbf/0x160 [ 1480.340524] netlink_rcv_skb+0x160/0x440 [ 1480.344584] genl_rcv+0x24/0x40 [ 1480.347864] netlink_unicast+0x4d5/0x690 [ 1480.351929] netlink_sendmsg+0x6c3/0xc50 [ 1480.355995] sock_sendmsg+0xc3/0x120 [ 1480.359713] ___sys_sendmsg+0x7bb/0x8e0 [ 1480.363692] __x64_sys_sendmsg+0x132/0x220 [ 1480.367945] do_syscall_64+0xf9/0x620 [ 1480.371768] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1480.376950] [ 1480.378577] Freed by task 12587: [ 1480.381973] kfree+0xcc/0x210 [ 1480.385086] nbd_put.part.0+0xfe/0x140 [ 1480.388986] nbd_config_put+0x6a0/0x870 [ 1480.393053] nbd_genl_connect+0x11bb/0x1630 [ 1480.397387] genl_family_rcv_msg+0x642/0xc40 [ 1480.401805] genl_rcv_msg+0xbf/0x160 [ 1480.405523] netlink_rcv_skb+0x160/0x440 [ 1480.409594] genl_rcv+0x24/0x40 [ 1480.412885] netlink_unicast+0x4d5/0x690 [ 1480.416953] netlink_sendmsg+0x6c3/0xc50 [ 1480.421018] sock_sendmsg+0xc3/0x120 [ 1480.424736] ___sys_sendmsg+0x7bb/0x8e0 [ 1480.428709] __x64_sys_sendmsg+0x132/0x220 [ 1480.432971] do_syscall_64+0xf9/0x620 [ 1480.436782] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1480.441962] [ 1480.443589] The buggy address belongs to the object at ffff8880ab545780 [ 1480.443589] which belongs to the cache kmalloc-512 of size 512 [ 1480.456250] The buggy address is located 216 bytes inside of [ 1480.456250] 512-byte region [ffff8880ab545780, ffff8880ab545980) [ 1480.468124] The buggy address belongs to the page: [ 1480.473057] page:ffffea0002ad5140 count:1 mapcount:0 mapping:ffff88813bff0940 index:0x0 [ 1480.481203] flags: 0xfff00000000100(slab) [ 1480.485346] raw: 00fff00000000100 ffffea00029dc588 ffffea0002be8e08 ffff88813bff0940 [ 1480.493211] raw: 0000000000000000 ffff8880ab545000 0000000100000006 0000000000000000 [ 1480.501078] page dumped because: kasan: bad access detected [ 1480.506776] [ 1480.508382] Memory state around the buggy address: [ 1480.513296] ffff8880ab545700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1480.520645] ffff8880ab545780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1480.527995] >ffff8880ab545800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1480.535346] ^ [ 1480.541577] ffff8880ab545880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1480.548935] ffff8880ab545900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1480.556279] ================================================================== [ 1480.563625] Disabling lock debugging due to kernel taint [ 1480.581764] Kernel panic - not syncing: panic_on_warn set ... [ 1480.581764] [ 1480.589161] CPU: 0 PID: 12587 Comm: syz-executor.1 Tainted: G B 4.19.211-syzkaller #0 [ 1480.598448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1480.607804] Call Trace: [ 1480.610397] dump_stack+0x1fc/0x2ef [ 1480.614104] panic+0x26a/0x50e [ 1480.617291] ? __warn_printk+0xf3/0xf3 [ 1480.621177] ? preempt_schedule_common+0x45/0xc0 [ 1480.625921] ? ___preempt_schedule+0x16/0x18 [ 1480.630312] ? trace_hardirqs_on+0x55/0x210 [ 1480.634619] kasan_end_report+0x43/0x49 [ 1480.638576] kasan_report_error.cold+0xa7/0x1b9 [ 1480.643225] ? refcount_dec_not_one+0x71/0x1d0 [ 1480.647791] kasan_report+0x8f/0xa0 [ 1480.651406] ? refcount_dec_not_one+0x71/0x1d0 [ 1480.655967] refcount_dec_not_one+0x71/0x1d0 [ 1480.660356] ? refcount_dec_and_test_checked+0x20/0x20 [ 1480.665617] ? nbd_config_put+0x5da/0x870 [ 1480.669751] refcount_dec_and_mutex_lock+0x1c/0x80 [ 1480.674666] nbd_genl_connect+0x11ee/0x1630 [ 1480.678971] ? nbd_xmit_timeout+0x730/0x730 [ 1480.683272] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 1480.688446] ? validate_nla+0x270/0x820 [ 1480.692411] ? nla_parse+0x1b2/0x290 [ 1480.696112] genl_family_rcv_msg+0x642/0xc40 [ 1480.700500] ? genl_rcv+0x40/0x40 [ 1480.703931] ? genl_rcv_msg+0x12f/0x160 [ 1480.707884] ? mutex_trylock+0x1a0/0x1a0 [ 1480.711927] ? __radix_tree_lookup+0x216/0x370 [ 1480.716492] genl_rcv_msg+0xbf/0x160 [ 1480.720185] netlink_rcv_skb+0x160/0x440 [ 1480.724236] ? genl_family_rcv_msg+0xc40/0xc40 [ 1480.728799] ? netlink_ack+0xae0/0xae0 [ 1480.732681] ? genl_rcv+0x15/0x40 [ 1480.736123] genl_rcv+0x24/0x40 [ 1480.739403] netlink_unicast+0x4d5/0x690 [ 1480.743451] ? netlink_sendskb+0x110/0x110 [ 1480.747666] ? _copy_from_iter_full+0x229/0x7c0 [ 1480.752314] ? __phys_addr_symbol+0x2c/0x70 [ 1480.756616] ? __check_object_size+0x17b/0x3e0 [ 1480.761179] netlink_sendmsg+0x6c3/0xc50 [ 1480.765231] ? aa_af_perm+0x230/0x230 [ 1480.769020] ? nlmsg_notify+0x1f0/0x1f0 [ 1480.772970] ? kernel_recvmsg+0x220/0x220 [ 1480.777106] ? nlmsg_notify+0x1f0/0x1f0 [ 1480.781060] sock_sendmsg+0xc3/0x120 [ 1480.784755] ___sys_sendmsg+0x7bb/0x8e0 [ 1480.788711] ? lock_acquire+0x170/0x3c0 [ 1480.792663] ? copy_msghdr_from_user+0x440/0x440 [ 1480.797405] ? __fget+0x32f/0x510 [ 1480.800852] ? lock_downgrade+0x720/0x720 [ 1480.804991] ? check_preemption_disabled+0x41/0x280 [ 1480.810012] ? check_preemption_disabled+0x41/0x280 [ 1480.815009] ? __fget+0x356/0x510 [ 1480.818463] ? do_dup2+0x450/0x450 [ 1480.821983] ? debug_object_active_state+0x254/0x330 [ 1480.827064] ? debug_object_init_on_stack+0x20/0x20 [ 1480.832061] ? __fdget+0x1d0/0x230 [ 1480.835583] __x64_sys_sendmsg+0x132/0x220 [ 1480.839801] ? __sys_sendmsg+0x1b0/0x1b0 [ 1480.843843] ? __se_sys_futex+0x298/0x3b0 [ 1480.847976] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1480.853331] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1480.858328] ? do_syscall_64+0x21/0x620 [ 1480.862284] do_syscall_64+0xf9/0x620 [ 1480.866066] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1480.871258] RIP: 0033:0x7f116aa900f9 [ 1480.874968] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1480.893859] RSP: 002b:00007f1169002168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1480.901571] RAX: ffffffffffffffda RBX: 00007f116abaff80 RCX: 00007f116aa900f9 [ 1480.908824] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 1480.916083] RBP: 00007f116aaebae9 R08: 0000000000000000 R09: 0000000000000000 [ 1480.923332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1480.930584] R13: 00007ffe7c5125af R14: 00007f1169002300 R15: 0000000000022000 [ 1480.938004] Kernel Offset: disabled [ 1480.941616] Rebooting in 86400 seconds..