itch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) 01:51:44 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='afs_dir_check_failed\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) r2 = open(&(0x7f0000000140)='./file0\x00', 0x200, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='afs_dir_check_failed\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) open(&(0x7f0000000140)='./file0\x00', 0x200, 0x4) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, r2, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) [ 271.151180][T29006] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.177915][T29015] device vlan2 entered promiscuous mode [ 271.183487][T29015] device gretap0 entered promiscuous mode [ 271.209044][ T24] audit: type=1400 audit(1642989104.536:263): avc: denied { write } for pid=29026 comm="syz-executor.1" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 271.234089][T29015] device gretap0 left promiscuous mode 01:51:44 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 271.260997][T29027] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 01:51:44 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:44 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:44 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800010000000000000000000000000095f17a90525ca554db9b906e21fc7b3627e9eff18d2f32d934cf2cffc059610af4e77ee28abf7893987931dc6394f6f55063a9f429380e1a1db2bf070029e2062c8001dca410609a1d83f229591ff842a31d155d102d"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0) r5 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000e700"/21]) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000140)={{0x1, 0x1, 0x8000, 0x0, 0x8}}) poll(&(0x7f0000000200)=[{r5, 0x400}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r3, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000400)) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800010000000000000000000000000095f17a90525ca554db9b906e21fc7b3627e9eff18d2f32d934cf2cffc059610af4e77ee28abf7893987931dc6394f6f55063a9f429380e1a1db2bf070029e2062c8001dca410609a1d83f229591ff842a31d155d102d"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000e700"/21]) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000140)={{0x1, 0x1, 0x8000, 0x0, 0x8}}) (async) poll(&(0x7f0000000200)=[{r5, 0x400}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r3, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000400)) (async) 01:51:44 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e000000002000028006000100000000000c0002000e0000000a0000000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB="a86c5d5b060f08010a001d1cda93b6b5d345d0a6229413049605fdc4e268612caf5ac11d12d09b97cd69680b5cde8891f831917662df6a1c2a7d9868d7c652a6da59eb55677cd6aba1563f44337d5d9483a240758a290346944b1d6e65e4c5d83a19bbebe98c9ad42535ba94e86641981f4e000000000000000000c32c5e8ec8f00cb4ba6cb76c17bd0c6ee8a99c5bda0e0df349b01a37111f344bd0656d6824620b89f5122fcef8a75563570d182981f378ac64f536a91ac45af12a30a415eb7c46f77dbc706445ca952ea998ef986593bae39f", @ANYRES32=r2, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e000000002000028006000100000000000c0002000e0000000a0000000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB="a86c5d5b060f08010a001d1cda93b6b5d345d0a6229413049605fdc4e268612caf5ac11d12d09b97cd69680b5cde8891f831917662df6a1c2a7d9868d7c652a6da59eb55677cd6aba1563f44337d5d9483a240758a290346944b1d6e65e4c5d83a19bbebe98c9ad42535ba94e86641981f4e000000000000000000c32c5e8ec8f00cb4ba6cb76c17bd0c6ee8a99c5bda0e0df349b01a37111f344bd0656d6824620b89f5122fcef8a75563570d182981f378ac64f536a91ac45af12a30a415eb7c46f77dbc706445ca952ea998ef986593bae39f", @ANYRES32=r2, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) (async) 01:51:44 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='xdp_cpumap_enqueue\x00', r0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 01:51:44 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='xdp_cpumap_enqueue\x00', r0}, 0x10) (async, rerun: 32) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async, rerun: 32) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (rerun: 32) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (rerun: 64) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) [ 271.333380][T29075] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.359660][T29072] device vlan2 entered promiscuous mode [ 271.365233][T29072] device gretap0 entered promiscuous mode 01:51:44 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66893da90eff395e696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83d898aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae14f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000704d1ca58985489be1424d410261bd2c5240e6bd26ca067a992f7a3f9a5c4ffc6093a3b9a29f7a0d"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:44 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) [ 271.386000][T29072] device gretap0 left promiscuous mode 01:51:44 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800010000000000000000000000000095f17a90525ca554db9b906e21fc7b3627e9eff18d2f32d934cf2cffc059610af4e77ee28abf7893987931dc6394f6f55063a9f429380e1a1db2bf070029e2062c8001dca410609a1d83f229591ff842a31d155d102d"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0) (async) r5 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000e700"/21]) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000140)={{0x1, 0x1, 0x8000, 0x0, 0x8}}) (async) poll(&(0x7f0000000200)=[{r5, 0x400}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r3, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000400)) 01:51:44 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) 01:51:44 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:44 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='xdp_cpumap_enqueue\x00', r0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 01:51:44 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xc3050000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:44 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000010000304000000000000000500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e000000002000028006000100000000000c0002000e0000000a0000000600050088a8000008000500", @ANYRES32=r3, @ANYRES64=r0, @ANYRES32=r3, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 271.465995][T29083] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 01:51:44 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:44 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xffff, 0x3, &(0x7f0000000140)="c6938fd31dee3151edb5154a8d993424c380724884f19d6d942d32fe29f30c766d374c726381a796c08ce92b10bca591d3673c68fdc21f2262dc3feec6da500b086b4dceac7e9dc44dff3d9f2f45b237a54baa7532c7da0e8ef4cd2003a2303ce12ab0067ca7b31bd6332a8d8091410906096afed70ff2fecba1225ace0562ea48ccaa5df398fd60baf6b47c9c62b7894530ff82574d7609d0cc09f2bc68ac1c950c126f938e4e84b0499e2da9b3eabb1302e6c3905e23b4ec11f7cbcc1aaf6a4c64d9265fbb8ddb30feef", 0x2, 0x0, 0x1, {0x2, r1}}, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400)={0x27, 0x0, 0x2, 0x6, 0x0, 0x1f, "e3244e3995b7547c54e55ab13c265c31815e9f90acae683509445a92aea4a43c919718b4491cecf73d341ee11825d68ff841da8fb76699d65a8441f0199274", 0x3c}, 0x60) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)="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", 0x1000, 0x142}, 0x1f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x48}, &(0x7f00000015c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x4, 0x0, r4, &(0x7f00000005c0), &(0x7f0000000300)='./file0\x00', 0x800, 0x0, 0x1, {0x0, r1}}, 0x81) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 01:51:44 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x1f, 0xc6, 0x7, 0x32, 0x0, 0x9, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x2fabc450, 0xfffffffffffffffd}, 0x0, 0x7fff, 0x3, 0x1, 0xe08, 0xffff, 0x5, 0x0, 0x16, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d131200000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156246cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96cb19e2506a04d26f1b665ddd0df168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f800"/250], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:44 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:44 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000010000304000000000000000500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e000000002000028006000100000000000c0002000e0000000a0000000600050088a8000008000500", @ANYRES32=r3, @ANYRES64=r0, @ANYRES32=r3, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000010000304000000000000000500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e000000002000028006000100000000000c0002000e0000000a0000000600050088a8000008000500", @ANYRES32=r3, @ANYRES64=r0, @ANYRES32=r3, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) (async) 01:51:44 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x1f, 0xc6, 0x7, 0x32, 0x0, 0x9, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x2fabc450, 0xfffffffffffffffd}, 0x0, 0x7fff, 0x3, 0x1, 0xe08, 0xffff, 0x5, 0x0, 0x16, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x1) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d131200000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156246cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96cb19e2506a04d26f1b665ddd0df168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f800"/250], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) [ 271.515371][T29136] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.546614][T29140] device vlan2 entered promiscuous mode [ 271.552249][T29140] device gretap0 entered promiscuous mode 01:51:44 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xffff, 0x3, &(0x7f0000000140)="c6938fd31dee3151edb5154a8d993424c380724884f19d6d942d32fe29f30c766d374c726381a796c08ce92b10bca591d3673c68fdc21f2262dc3feec6da500b086b4dceac7e9dc44dff3d9f2f45b237a54baa7532c7da0e8ef4cd2003a2303ce12ab0067ca7b31bd6332a8d8091410906096afed70ff2fecba1225ace0562ea48ccaa5df398fd60baf6b47c9c62b7894530ff82574d7609d0cc09f2bc68ac1c950c126f938e4e84b0499e2da9b3eabb1302e6c3905e23b4ec11f7cbcc1aaf6a4c64d9265fbb8ddb30feef", 0x2, 0x0, 0x1, {0x2, r1}}, 0x0) (async) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400)={0x27, 0x0, 0x2, 0x6, 0x0, 0x1f, "e3244e3995b7547c54e55ab13c265c31815e9f90acae683509445a92aea4a43c919718b4491cecf73d341ee11825d68ff841da8fb76699d65a8441f0199274", 0x3c}, 0x60) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)="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", 0x1000, 0x142}, 0x1f) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x48}, &(0x7f00000015c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x4, 0x0, r4, &(0x7f00000005c0), &(0x7f0000000300)='./file0\x00', 0x800, 0x0, 0x1, {0x0, r1}}, 0x81) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 01:51:44 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6531e8ff85031def43492874bc4ddd20205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac8df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f805813c55433ae2bd2fd65a6e3f8877900000000"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:44 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xffff, 0x3, &(0x7f0000000140)="c6938fd31dee3151edb5154a8d993424c380724884f19d6d942d32fe29f30c766d374c726381a796c08ce92b10bca591d3673c68fdc21f2262dc3feec6da500b086b4dceac7e9dc44dff3d9f2f45b237a54baa7532c7da0e8ef4cd2003a2303ce12ab0067ca7b31bd6332a8d8091410906096afed70ff2fecba1225ace0562ea48ccaa5df398fd60baf6b47c9c62b7894530ff82574d7609d0cc09f2bc68ac1c950c126f938e4e84b0499e2da9b3eabb1302e6c3905e23b4ec11f7cbcc1aaf6a4c64d9265fbb8ddb30feef", 0x2, 0x0, 0x1, {0x2, r1}}, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400)={0x27, 0x0, 0x2, 0x6, 0x0, 0x1f, "e3244e3995b7547c54e55ab13c265c31815e9f90acae683509445a92aea4a43c919718b4491cecf73d341ee11825d68ff841da8fb76699d65a8441f0199274", 0x3c}, 0x60) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)="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", 0x1000, 0x142}, 0x1f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x48}, &(0x7f00000015c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x4, 0x0, r4, &(0x7f00000005c0), &(0x7f0000000300)='./file0\x00', 0x800, 0x0, 0x1, {0x0, r1}}, 0x81) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xffff, 0x3, &(0x7f0000000140)="c6938fd31dee3151edb5154a8d993424c380724884f19d6d942d32fe29f30c766d374c726381a796c08ce92b10bca591d3673c68fdc21f2262dc3feec6da500b086b4dceac7e9dc44dff3d9f2f45b237a54baa7532c7da0e8ef4cd2003a2303ce12ab0067ca7b31bd6332a8d8091410906096afed70ff2fecba1225ace0562ea48ccaa5df398fd60baf6b47c9c62b7894530ff82574d7609d0cc09f2bc68ac1c950c126f938e4e84b0499e2da9b3eabb1302e6c3905e23b4ec11f7cbcc1aaf6a4c64d9265fbb8ddb30feef", 0x2, 0x0, 0x1, {0x2, r1}}, 0x0) (async) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400)={0x27, 0x0, 0x2, 0x6, 0x0, 0x1f, "e3244e3995b7547c54e55ab13c265c31815e9f90acae683509445a92aea4a43c919718b4491cecf73d341ee11825d68ff841da8fb76699d65a8441f0199274", 0x3c}, 0x60) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)="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", 0x1000, 0x142}, 0x1f) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x48}, &(0x7f00000015c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x4, 0x0, r4, &(0x7f00000005c0), &(0x7f0000000300)='./file0\x00', 0x800, 0x0, 0x1, {0x0, r1}}, 0x81) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) [ 271.587085][T29140] device gretap0 left promiscuous mode 01:51:44 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x1f, 0xc6, 0x7, 0x32, 0x0, 0x9, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x2fabc450, 0xfffffffffffffffd}, 0x0, 0x7fff, 0x3, 0x1, 0xe08, 0xffff, 0x5, 0x0, 0x16, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x1) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d131200000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156246cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96cb19e2506a04d26f1b665ddd0df168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f800"/250], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:45 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xc3ffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:45 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:45 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000010000304000000000000000500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e000000002000028006000100000000000c0002000e0000000a0000000600050088a8000008000500", @ANYRES32=r3, @ANYRES64=r0, @ANYRES32=r3, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000010000304000000000000000500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e000000002000028006000100000000000c0002000e0000000a0000000600050088a8000008000500", @ANYRES32=r3, @ANYRES64=r0, @ANYRES32=r3, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) (async) [ 271.643239][T29146] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 01:51:45 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) 01:51:45 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:45 executing program 3: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x20, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x1) socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 01:51:45 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='rxrpc_recvmsg\x00', r1}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) [ 271.722675][T29227] device vlan2 entered promiscuous mode [ 271.728332][T29227] device gretap0 entered promiscuous mode [ 271.754112][T29227] device gretap0 left promiscuous mode 01:51:45 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='rxrpc_recvmsg\x00', r1}, 0x10) (async, rerun: 32) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async, rerun: 64) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:45 executing program 3: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x20, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x1) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 01:51:45 executing program 3: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x20, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x1) socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x20, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x1) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) 01:51:45 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:45 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='rxrpc_recvmsg\x00', r1}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:45 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xc4050000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:45 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:45 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 271.927458][T29282] device vlan2 entered promiscuous mode [ 271.933038][T29282] device gretap0 entered promiscuous mode 01:51:45 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r2}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c6f0000002200618200000000000000000900000008000100c8cc664d"], 0x1c}}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:45 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 01:51:45 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x1, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x7fc}, 0xb09f9dd7f5f9a4a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:45 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (rerun: 32) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (rerun: 64) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 01:51:45 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async, rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async, rerun: 64) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (rerun: 64) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000d80)={0x1, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x7fc}, 0xb09f9dd7f5f9a4a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async, rerun: 32) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async, rerun: 32) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (rerun: 32) [ 271.976743][T29282] device gretap0 left promiscuous mode 01:51:45 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:45 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r2}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c6f0000002200618200000000000000000900000008000100c8cc664d"], 0x1c}}, 0x0) (async, rerun: 64) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async, rerun: 64) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async, rerun: 32) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async, rerun: 32) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:45 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:45 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xc8030000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:45 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xee01, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fstat(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r3, 0x0) r4 = getgid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003040)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000003140)=0xe8) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./control\x00', r7, r8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000003180)={{0x1, 0x1, 0x18, r1, {0x10001}}, './file0\x00'}) r10 = syz_open_dev$vcsn(&(0x7f00000031c0), 0x7, 0x509100) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000003200)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1c, 0x22, 0x7e2881d4b0058261, 0x0, 0x0, {0x9}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="c8cc664d"}]}, 0x1c}}, 0x0) sendmmsg$unix(r1, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="a2ecaa25e19e13e30281b75bef9df4abf84d9465ab2384674e65d2e79821faaeb1e017cb5a15e23b8403854f066e728c723e5d2249eff59b6cee3909a12f1bf9508e82aa3603950f883d93182dbf2aa63129a7d38033513f8ef9f08d7f211440244159b7e8d9eee2a310bc78de63ea6d165e3fe582f27914e78a3afd74504dd1ca7f275046f439821ea5a0c4abe777240271a62ebc3492a12e8cd16d0c4a91b86a480047694f916bf38a7f0a7edcdafa2136f65c3b3c9c967cbd7bb5514602522e899dff4b586685ea54ff1869420c7cf3ddc39fe1cc5173a116c85ef41eddd14c52", 0xe2}], 0x1, &(0x7f0000000300)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x98}}, {{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000480)="2d248235dd212f4c56a1422f5c3f85210c070491ec810ee15f60e7be5de35c971818dac01651cd35b1c1840b61e7eb7025a909a83278093845686a8ed903009febdc603deaffc70caed29f384a8d2fc11f00b240444f193b7913743e494c3b4c5ebc1c10a26198b141587df8382c4d1042754169fc", 0x75}, {&(0x7f0000000500)="69b75aa1a216c0e143944e95c01fe26837779d77b528f1590b04aefd467243ae16996d2adba313e5d745352524974d12a57a612136383b5adcdda99731907b5090a4d51354972d1857afffe68c284711c406b30318335bb8c4835ce0c153effe7b3af5c579e9b65c16024037d8315c1b9b7033e7ef0178517b1938e064c6821f1d3628b7b7c95255f95cba51ca9dff13c3b7c1faf092e58e349375b0f45a3337bb165ae0379e73a1d6648606d01312b98353c8d9563b577b1c685196297244037f72561d2caf3945576f6ab01719e9a3c449c6e678157327700e546fbf05f3baa62ff03a7e801d67d15224cffcf7962e90", 0xf1}, {&(0x7f0000000600)="d94c0e1d4d1f62c7871aa1eed2440c7d1f5832edb1b01bdddfde1f27c299103d54cfb5560d4bae60e3eb7a59a13ab99f259019f9c6b965bb16de33a01f252f676f83f05885762e73ca013e31677b8b596400ab7b27286bb63237586a0db57869b8a4fd4b480924ce88f08a52db895775be76644fc9def2d98e77d25dc6c3984ebdbb9aea142821298257a7d65c62005f9c66f8d0e107d66294b4133f37962bcd5fdb3cc3f632b413cb5ed1099f09dd1437a7e484182618877c0f065846720cd5f2472e4211840a308bf89964cbda77ebda87dd9ecd1424dbb0fecca9f6e4ae7e74691419", 0xe4}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="88984049b8f47e70665740b67d4cfb2ca7267d4e292e139676feb74ba1a7bd1ed7689f4b004f7c53efba0c837766dd47b30e8266ce6f8a0045f9a6876988c3d4be7cdc98d0e597259384f5f7684698f744fbbfe83ccf2ce5", 0x58}, {&(0x7f0000001780)="c7c2fc4247fd787dffaada0d20d81a5f5dba63c5d7814fbd50b24d9c6cc19417c719e9d50fb0a9023b76a73add6d299077dd347ed13c175777844fd24570b2d8b4423401fc4fde1c82eeda96a1da1e3a582def5e80bd75dea48f166dde1b180abfa08814b0db4a3b02a8efae4bd4ba0470869fbf3608857a3789306a87d9c7033ba1a4cc38c5a83bcd18578c84075812e5cde6857b118b9b5bd8d3d0d812909ae4c37dfe3b024a862f23d48ad40293019e96b0eac12b49687a9a1ca8d083334ea18e1027a3c86b48eb3e6775384b12ecea50021f3ca9bcff8c8888edc3bfb810c95fc2c4c617e28ddc7793618a3ccdb29d1716e87c9e", 0xf6}], 0x6, 0x0, 0x0, 0x2000c040}}, {{&(0x7f0000001900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001980)="85c017af524bc2cf8b4a2335c16137e5820f3c5613ff7860462143f9292fc77608e26398d1aa2bed54b1b8dcbf7fa77923b0d5371aeac970b5a3365100e4f5e7469ca9dd6cca340e7b5421bd980250bc48bf3c01b2b4383a24a21fccb497ac0294a74b94efbada6ac69cce098981366bb10a26fa8d313b7da2c82ceefa6742fadde532bd8fa49c2be9fcca39df9159947f71500022f35cd85a94128951b7e45ff9712f4ebba287a6b8a45e014a75bd11a0ee60d7616cb8e50afad79ae2b4e852f88feddc7c79cfc459c7cec7463b0acbe6e936281de4cfcc7636", 0xda}, {&(0x7f0000001a80)="34f463ef434323448ecab331794172546d716f7015ded2f65d2bb01236d224dedef9a473e043790e3ff238cf48484c5ed05d1fb1ee6063b0a1c815be4556a6ad273e7e989092a324828978a53fc7cb63b2f39c3585befb", 0x57}, {&(0x7f0000001b00)="5081d9a7b04506179ebd1e6fbe73e917ae30949afe13fd263ce5bf1aa88847d855e796b37f78fcc7273e987d8db4ff50a4fcb9b9e6e59e6cbcb33eaa860a96f5b8d7", 0x42}, {&(0x7f0000001b80)="e6be0008a8c9629d7edc0481ed54a0e0312f683e4abb01b4ac693a3d0607372366cef0da52f44ff49038613af4729fd22adacb953b44ad31f6ab50d27b72a8ce87ea34f41a25", 0x46}, {&(0x7f0000001c00)="92d740bfd1fd123c86812018a1cabaf5d40553ccb2dab3952cc185dc71859201f1b5a7de07d1ef67d432306639c9724719199fb6c57bdf080558329aba7d586c1205fc34458473b3ef069c6cdf292fb876b52a83e135339d60f099c86eedecec39", 0x61}, {&(0x7f0000001c80)="7755200570ec04957b1d6e1ab8e414b472f265e3799b6f3abec227a9a96220e2ef3b3aadbdd2d164e803809d1542613f3250c49e14d8acfdfc6e6cf44a16639f0acb74e0afe149367aef908d2c5f97c640b2e315ad14749e16d67c3136844a6990ccecc58d3723b87d007c87474db92524a6a0c52716afdbf3996e7fe178b69228c5cf25b78b39998ff601a8c87385dd133e5469d7dd603d86d99cebd115176f497b3250bd55e6ff4020f5c99d0f7908ecc0f8797e805f054a5e595e91ffef5097ebb945efc141f72c72a7865dca103cf19022a64c", 0xd5}, {&(0x7f0000001d80)="95888514cec0d14314c6c554c616f820fa92dec525f80ff60be066289b41ff2b5abba5a8883a0ef252a97c6fa72bd683ff970bd0bb0505c2e01bac54fad3dc48d89e62fce56c168ef5e447d354e80b841890b885d55a7457b5131919a66246b1a86211bf904d12a9887faf95fb34899a5d601e0ebc60d5a8f6b1799c1e2e7ad9c81d141317a405d78d0c169609494afa5c123f3374860624114012f2dc2cf541273c", 0xa2}, {&(0x7f0000001e40)="f67d4dbf22b99deb64fb6ef69c21b55736604c45a73ecbecdec9d2171dab01f96d703e97f924f2d593909ee80de433e189ed079b8f62f150c6feaf61dd9fd2cd1efdcea8cdf127e2bdcb1a07fe0bc399cf06f787ba528735c91435462102e0e798be82dbc3bbfc72e16f714fc67e3064a13b43ece34eaf88ba311e8892f3719c65b8e1f41e1cedaabc59a0f614b07aaedc07c0cc053fa9312d0848089298fd", 0x9f}], 0x8, 0x0, 0x0, 0x8800}}, {{&(0x7f0000001f80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000002000)="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", 0x1000}], 0x1, &(0x7f0000003240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5, r8}}}, @rights={{0x20, 0x1, 0x1, [r9, r10, r11, r12]}}, @rights={{0x10}}], 0xb0, 0x40004000}}], 0x4, 0x800) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r15}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:45 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x1, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x7fc}, 0xb09f9dd7f5f9a4a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c999b3e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x1, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x7fc}, 0xb09f9dd7f5f9a4a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) 01:51:45 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:45 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r2}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c6f0000002200618200000000000000000900000008000100c8cc664d"], 0x1c}}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r2}}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c6f0000002200618200000000000000000900000008000100c8cc664d"], 0x1c}}, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) 01:51:45 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000002500000095d05ff9f19a98745f140066d0d3ad924f8a71462f1d96dfe0a2de28cf1aa669bdccecff348dd5be873855b961b1956fb751be0afbc2a666beeb83dfe498994c6d41c1296b"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@loopback, @in=@empty, 0x4e20, 0x0, 0x4e20, 0x8000, 0xa, 0x80}, {0x0, 0x8, 0x8, 0xb7, 0x80000000, 0x40, 0xfffffffffffffffa, 0x7ff}, {0x3f, 0x31, 0x7, 0x9}, 0x7fff, 0x0, 0x1, 0x41bd3b92e45840b9, 0x7, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x8e}, 0xa, @in=@remote, 0x3500, 0x4, 0x2, 0x1f, 0x80000000, 0x3, 0x3}}, 0xe8) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:45 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xee01, 0x0, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) fstat(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r3, 0x0) r4 = getgid() (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003040)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000003140)=0xe8) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./control\x00', r7, r8) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000003180)={{0x1, 0x1, 0x18, r1, {0x10001}}, './file0\x00'}) r10 = syz_open_dev$vcsn(&(0x7f00000031c0), 0x7, 0x509100) (async) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000003200)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1c, 0x22, 0x7e2881d4b0058261, 0x0, 0x0, {0x9}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="c8cc664d"}]}, 0x1c}}, 0x0) sendmmsg$unix(r1, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="a2ecaa25e19e13e30281b75bef9df4abf84d9465ab2384674e65d2e79821faaeb1e017cb5a15e23b8403854f066e728c723e5d2249eff59b6cee3909a12f1bf9508e82aa3603950f883d93182dbf2aa63129a7d38033513f8ef9f08d7f211440244159b7e8d9eee2a310bc78de63ea6d165e3fe582f27914e78a3afd74504dd1ca7f275046f439821ea5a0c4abe777240271a62ebc3492a12e8cd16d0c4a91b86a480047694f916bf38a7f0a7edcdafa2136f65c3b3c9c967cbd7bb5514602522e899dff4b586685ea54ff1869420c7cf3ddc39fe1cc5173a116c85ef41eddd14c52", 0xe2}], 0x1, &(0x7f0000000300)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x98}}, {{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000480)="2d248235dd212f4c56a1422f5c3f85210c070491ec810ee15f60e7be5de35c971818dac01651cd35b1c1840b61e7eb7025a909a83278093845686a8ed903009febdc603deaffc70caed29f384a8d2fc11f00b240444f193b7913743e494c3b4c5ebc1c10a26198b141587df8382c4d1042754169fc", 0x75}, {&(0x7f0000000500)="69b75aa1a216c0e143944e95c01fe26837779d77b528f1590b04aefd467243ae16996d2adba313e5d745352524974d12a57a612136383b5adcdda99731907b5090a4d51354972d1857afffe68c284711c406b30318335bb8c4835ce0c153effe7b3af5c579e9b65c16024037d8315c1b9b7033e7ef0178517b1938e064c6821f1d3628b7b7c95255f95cba51ca9dff13c3b7c1faf092e58e349375b0f45a3337bb165ae0379e73a1d6648606d01312b98353c8d9563b577b1c685196297244037f72561d2caf3945576f6ab01719e9a3c449c6e678157327700e546fbf05f3baa62ff03a7e801d67d15224cffcf7962e90", 0xf1}, {&(0x7f0000000600)="d94c0e1d4d1f62c7871aa1eed2440c7d1f5832edb1b01bdddfde1f27c299103d54cfb5560d4bae60e3eb7a59a13ab99f259019f9c6b965bb16de33a01f252f676f83f05885762e73ca013e31677b8b596400ab7b27286bb63237586a0db57869b8a4fd4b480924ce88f08a52db895775be76644fc9def2d98e77d25dc6c3984ebdbb9aea142821298257a7d65c62005f9c66f8d0e107d66294b4133f37962bcd5fdb3cc3f632b413cb5ed1099f09dd1437a7e484182618877c0f065846720cd5f2472e4211840a308bf89964cbda77ebda87dd9ecd1424dbb0fecca9f6e4ae7e74691419", 0xe4}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="88984049b8f47e70665740b67d4cfb2ca7267d4e292e139676feb74ba1a7bd1ed7689f4b004f7c53efba0c837766dd47b30e8266ce6f8a0045f9a6876988c3d4be7cdc98d0e597259384f5f7684698f744fbbfe83ccf2ce5", 0x58}, {&(0x7f0000001780)="c7c2fc4247fd787dffaada0d20d81a5f5dba63c5d7814fbd50b24d9c6cc19417c719e9d50fb0a9023b76a73add6d299077dd347ed13c175777844fd24570b2d8b4423401fc4fde1c82eeda96a1da1e3a582def5e80bd75dea48f166dde1b180abfa08814b0db4a3b02a8efae4bd4ba0470869fbf3608857a3789306a87d9c7033ba1a4cc38c5a83bcd18578c84075812e5cde6857b118b9b5bd8d3d0d812909ae4c37dfe3b024a862f23d48ad40293019e96b0eac12b49687a9a1ca8d083334ea18e1027a3c86b48eb3e6775384b12ecea50021f3ca9bcff8c8888edc3bfb810c95fc2c4c617e28ddc7793618a3ccdb29d1716e87c9e", 0xf6}], 0x6, 0x0, 0x0, 0x2000c040}}, {{&(0x7f0000001900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001980)="85c017af524bc2cf8b4a2335c16137e5820f3c5613ff7860462143f9292fc77608e26398d1aa2bed54b1b8dcbf7fa77923b0d5371aeac970b5a3365100e4f5e7469ca9dd6cca340e7b5421bd980250bc48bf3c01b2b4383a24a21fccb497ac0294a74b94efbada6ac69cce098981366bb10a26fa8d313b7da2c82ceefa6742fadde532bd8fa49c2be9fcca39df9159947f71500022f35cd85a94128951b7e45ff9712f4ebba287a6b8a45e014a75bd11a0ee60d7616cb8e50afad79ae2b4e852f88feddc7c79cfc459c7cec7463b0acbe6e936281de4cfcc7636", 0xda}, {&(0x7f0000001a80)="34f463ef434323448ecab331794172546d716f7015ded2f65d2bb01236d224dedef9a473e043790e3ff238cf48484c5ed05d1fb1ee6063b0a1c815be4556a6ad273e7e989092a324828978a53fc7cb63b2f39c3585befb", 0x57}, {&(0x7f0000001b00)="5081d9a7b04506179ebd1e6fbe73e917ae30949afe13fd263ce5bf1aa88847d855e796b37f78fcc7273e987d8db4ff50a4fcb9b9e6e59e6cbcb33eaa860a96f5b8d7", 0x42}, {&(0x7f0000001b80)="e6be0008a8c9629d7edc0481ed54a0e0312f683e4abb01b4ac693a3d0607372366cef0da52f44ff49038613af4729fd22adacb953b44ad31f6ab50d27b72a8ce87ea34f41a25", 0x46}, {&(0x7f0000001c00)="92d740bfd1fd123c86812018a1cabaf5d40553ccb2dab3952cc185dc71859201f1b5a7de07d1ef67d432306639c9724719199fb6c57bdf080558329aba7d586c1205fc34458473b3ef069c6cdf292fb876b52a83e135339d60f099c86eedecec39", 0x61}, {&(0x7f0000001c80)="7755200570ec04957b1d6e1ab8e414b472f265e3799b6f3abec227a9a96220e2ef3b3aadbdd2d164e803809d1542613f3250c49e14d8acfdfc6e6cf44a16639f0acb74e0afe149367aef908d2c5f97c640b2e315ad14749e16d67c3136844a6990ccecc58d3723b87d007c87474db92524a6a0c52716afdbf3996e7fe178b69228c5cf25b78b39998ff601a8c87385dd133e5469d7dd603d86d99cebd115176f497b3250bd55e6ff4020f5c99d0f7908ecc0f8797e805f054a5e595e91ffef5097ebb945efc141f72c72a7865dca103cf19022a64c", 0xd5}, {&(0x7f0000001d80)="95888514cec0d14314c6c554c616f820fa92dec525f80ff60be066289b41ff2b5abba5a8883a0ef252a97c6fa72bd683ff970bd0bb0505c2e01bac54fad3dc48d89e62fce56c168ef5e447d354e80b841890b885d55a7457b5131919a66246b1a86211bf904d12a9887faf95fb34899a5d601e0ebc60d5a8f6b1799c1e2e7ad9c81d141317a405d78d0c169609494afa5c123f3374860624114012f2dc2cf541273c", 0xa2}, {&(0x7f0000001e40)="f67d4dbf22b99deb64fb6ef69c21b55736604c45a73ecbecdec9d2171dab01f96d703e97f924f2d593909ee80de433e189ed079b8f62f150c6feaf61dd9fd2cd1efdcea8cdf127e2bdcb1a07fe0bc399cf06f787ba528735c91435462102e0e798be82dbc3bbfc72e16f714fc67e3064a13b43ece34eaf88ba311e8892f3719c65b8e1f41e1cedaabc59a0f614b07aaedc07c0cc053fa9312d0848089298fd", 0x9f}], 0x8, 0x0, 0x0, 0x8800}}, {{&(0x7f0000001f80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000002000)="d18ebadb29c7081f43ce25dbd71b8775bbd1f3dfbc1c0f8595fdf888494c579d48354cfe16b6e98823c3f5f73738cdf82c5977c9f3ef8f31788408bc83bbe9959469f55f4beed0c5ae91dd44a7da89a80036af9e83c0cd769861f8dc63906ccbbbd66b18ba87edad351544c1a8aad8619033b0f07a0fd2074a31a674643f1ab82bf37dd48854f028737e7cafde65e71f864322744992183d9199bfb4757dec3c50612ebd57e009126e63a32c48caca546c75d1c12f2c92d9d21ef54becb24f457b1084bf1f330c056eb9713f7e5c9181166da4a1ec989a6d09c1a4ff4f7341799e2d9eac854a2f6b722535bbb019f6c7969ed49db677ceb4b4cdce9e965fb43be7c837a2cf29b36324a77e58e03623c39ac89a9a4251634a1e6f28e0807fa3c284ad239d5b2bc43a5c18fd8f941a075da30a1668aa6ab1bc646b9c9459331e3a0eba4f5c10c744783dfd9d997508904409eb1f09796494320c5f394056676ad6baa9bf2e4d19bc02ff32be58fb714dcca063cd1c9156a51b270fde62d6bbc27c6667c1bd0711191b51448db9b497b3a1be4f04bee67b311d1db5a6b8244404de9dd403442ee77e7c38ff8f5bd62bd5239c9da6d5fb22cce8db407bc1d74ac337c4ab0ccbe62202256a700703302093d83382ab14211084d2031e1b4fde5129af7ee5167293137a583923c9a30a130d107f95b459fe0c80f97fa86b56bd90008e85197a9859b3e9b023261c951cc6c455762ab51af17fb26e94432f104c52d3887b7bbcb8b62ffb1fa4bf653d91fa2e7fc9457928dd055cf142a5218f2891a06a40b09ee6eb2bf2dcf57a7ce77ad549a35deac4244a5df3cbfc03ff0e97409362d2c4c748d08284d800313a105bdddd26a7ae897b4a5d9e51fff8ba08a4530f9502ed61e3d37adfc9df1d07159aa3b3eed6de31b4ac974391a0590111759e2c480bb4ae50acb640dfaefbfa4d92aded04144c738705fc5d16de31dcf2ec42f690fa07b5615ce8cf02fd1f02236bafab546b759c87dbb8294c5711e56b424bd8bfcbb05633691239f8507fcdf9b4c670b0f3a1595f04ac510cf1f8d83f20f7505d71ae520c39071fee5c23d4b42088e56d0357daaac4ec8dbccf197109486b0c4065fbead54efd8521280582ae6dddd3eaf6201da951519d04e148bfb5b1d374ccad68f1ff720c70ce167760d1a91e583709154e555dbae0a6a9c41813472e10306c948c944efdc018727a5be045ba042d2a6d5e0a9933cca3472912bb90ffa061d3ca4ce5a60e98fa6afc884e22acb0b3a018560c4e843644347cb16149b9ddc2a9263b427bf10f808f3df2761a06e236342abd28b441e84d3fe83c50b5fd84a8aed37bc1a0c1fe5d489d89d864390f97f4c72447b80203f712dc81d8de2e2c12bc2c32a399f4d47a91e4ca9a02f5ec970ed06e3daf9a2f57adf738f23eb8a40d85f6e5874682298a0c8054ae6af61aecfb18834d2e06effb2fd8e4acfee4c0a9181023c1ccc611f72dd61ca12adc443fc3110f0ce5d3d0883f43546100968d52cf0c92b0bdcba9d628aaebcac8bee3f46161c1ef0cf205f07682ce1d62aaacde5083ada808476a04ccc65a35da0b84875b21af7d13016c545ba28ba732184380a9e626143995527063ac67a4b6be7f6aa64df329ea0300da9f8b8cb0e0c316f1643ffe413740612cbfb1642c36925c3aac6e4b859f6ebc0c848f4b8ab7ae68b5fafb728eaa3919e97e7af9982e92232c57374fc51e3e13fd5503a52e2b74cf118456aaf7c297cbe3141af11c7c921c03f0eee0df3adc8674d492f63f382f3df84bbd201af4ef7add53a844cba02cbdb85af87deb83a39907bbe87340f0608614f4b179e036fe08ed1a32fb505caa392b1fb597ff79f613680913415fed039b0ff01a45781e1fcb21080d3d0827714680f3296b975d0ed79acf00e90cc1191c55a2b46efbf72be162144b37eea64817b0362b2e719496033a1e3dcfa2a0e64cea8345f6fe7b98239459de51f885060239a0c7907765d79934b9226118772b8b2cd3974d66355bd21752ff5d35cf39fa1f06b3945cfb18e60af1d8c4ab5b47c2c8cf380299835f862e86e06f9044bbdc922259060cc176dc601391368997cef3f7f6a31cf5d4b6397dfadd52c8dadc286f29da62f87cf9dc005fc67b3ad55954c5292c305cd04a5d16b1c70910461b66712208e5d45cdd3cbac68ff8fac824d46b8cd5ba1ead8200e1a444c0d87900f87bdb18f831e23af61bc99c0bda7e89bcf658525830f44d71a44dd3ad4454da9aa9df5f57f4134e76791840007bc1cb7fcb76d9b1b11a8698e31b23ae5302db05176e26029d01e626113af8f836d367f230c05aecfb38a68e31103adffa7ee5260ffb9252dcd14b2163d7ae3f518e1258d24533784d420faec2dea4ec2ad65a20ec8e958759593a4c489a211dc0df7c174ba3b45b9da3661cb2d04b0d9eb7dfcf1dea7fb6169befb4e2d01188a2a9873b8579486d3fa114e7400d7a35ed4817399a45eacc07f9d591d809878e328cf0cd8caf281c9a38dd259cb1c3f2b2cc3194003474b1d0cb8c56e2a5fd51c0beaed0616d95968f0e75c6bb35bf28278cec502ca2db9bd85cc08056e54a72ec4c49117dd1850fbac9ae1d0b35bab9876c9a8cade43831920d7bc245374313e67492d2e567ff7a4be48e2cca215d0ca0a87e84d9c4f4c53555b38d54cc8f639fb489effac8e806389b0ad44144354954e00c9311e6575965f14b0f97445299ccfd19f51729400b71fc9d6c2a7114b766c2d5924cfbb1cbd55b1aa97dc2c8b1ad43f3b0c3a1fc907e853b9c6094d10fc408f72c4e76d126ef34a7a03af0a0edae8503c95263e17e32afbe830dc0210a0da9acc1dc4c09bfd3173b48a0626f93ac19d3440c3192500163cbece4d867bc5d6c8610d43f438417b21fe81674766e4ef98ffa6439360e343052bbddc2158e967b9a41f2ba73a15806ebd6d94d6c48c0f680e447cfbfd1708f953e7a3338124dc874b93b58337e8cb3a6ae7cd2b0f58ee1c160b6d9159502dd6a91730d41545901da04f5ee4cd4d6292149f25a1a57d4c47dea10af7e1272b7569531988d67dd9fad05cb12c119e87392259dde4f10c7de9d02eb633e884eb362f05c6bf297eea797c3d47680351fbf7217846b7190783241a00925ac63e55bf4fec5a1711cb488490a1ee9a3999165ac4cd6598c07e32bfa28eca862cd5e95c2d8b175d09b6c93ac12c4e4b5be4f7dd0225bbc00729920017e060fc45602e2c5fd27454e996a0739c0d2a1b9eca93caf148605f6289cd983d2b4899be1287eced2b9628214262dc8ade4e4f04ca924e4348cef4ab8381db720ba3b27b3436ded2be354825a91d72f1a2a319bc7cb45216e4801c26b9e3d9601686474cdb769d9426040c563c2c076c2942b8be5618f334c37715e011308d13b728a85dce34befdc7fb18241e4c115a98cec4a576f3337ac7a7b0b79b427b12ad651227be397909d5a5897d67d626b4ae62395d095c975a827a07fd80b80797d2bd4f0cc19aeeb3d38e1771139f7b61a65fdeae1b899e848cb550511d13e7843d306efdc359b39ed900ca2e1e8efbe0c0e4402c8beaaa55a1d030f9d988689c43c05f027baede9fb93707366356eb24d79b8db9ab21d8c43c0eff7fcdd5db8fd61cf313771e4d80fa85715ba319406d24886af8a15cf1e09c35a50319a2af61a10c66222fc68a8f1f5aef95861e4de936dc4fbfbca7eb58e8d53e72f73641b3c4cbc829d2a96310546afbe1fd7254e6b41ace98c80d652f0b6d6af135c51bbdafbcb39bf15b34a100f4d00f47dae49c4f5e62cdde2ce21c92aecfa423764a65c784cbdbae60472b2e0b38e584229e0ec820acfae2f89460d6f0b4e26b73ec32124fcb997ae005be9b568f5d8dae5856e6b77a9c6f53bf8dd9753394cd5b6e1c6c9e3105d990e2e1ae158bde2b17e4344559420d84fc7c0d7cce01c69bf85f2a9704dcd507c219a01c50f9afd442f4a5d3abc3b10e62d046e660401ec98760fbc73261bc1f5a61b52e4320bab852767d7e60569c39d1d31af68355ff8e62cbdf27aab530e20d8a8cf7e93f5bdc5473dbbffc684b29fcd8a03aef52092786362e5a3321afedd907cddd4dced5137ad24eedd05a82bd9daaab80b3dd85bf95bf703f4dc8d110a4fa80b5239ead54025fea0bfec18e3e4f9e8d6ff5906381234cf03001d996f4ad0f9051eac468b1a677fd08e141489ff0773bab3a21e2d96d92b4950f6d7861808cba64d346e10e62e00584cafe11a26e14d935b146a08e1ac21f7f9f1538c12e517778f1a941d0eea5f6eb3143a7f90d0bba996edd2710a62a8199578100470e0651b3064b69acc2ad0d8cd051e631af2cac1a244e7a67ebead75322b8954bed16a3d50dd153ae34e9174b95e07d45adeefe7a7e943dde9fe6b3aded6e29e5fd70bc2bb0b1647e8a438cc377d7412b8c532c5d38e318d434e0b79c1f0ed3e9f89c81d74215c56002bb1db9d7ecccd1b6ad33ccccbd9caaeefaa86bd0f3d1a10b2ea530f20f709f0ff2d4089a367a3e129586b65a36a850037400f66210e144c8cebdd84f9b2681cf0c83cc7fc1964ee005e875806dcbaf035a3cc8c10b23f1f310dba6a72c2f552e5446cf53982585c6af9827cfd47ca62a109fc23866ff7cd71f25ce05b08e8b72a7117dd26cf365a34af42638a5ccc82b447d8bb71cf218303839b5c2545149bea4f2a2364263f8db6eed4267e8a6ed88f4cf5d5879dcc6375db7f2a971dc28c042d19ecdcf27f8fb6af0291892aebf0c5155b58c9bba1e389f8d03f64ccf55b2d42c1cffeae316620aed7a2d874d5ccda4ea91905cdf13452c7f8d46e8c76bd8dac4636fc00d36ba4f82e22750df5cc10e72401b93fc17337bcb76fd8775ef216c6918b27d2da37426153886f19dd35adf2a7ebddb2877c89f9d7ff5b602fcc3df340d5ead3aee1d78f99d3a58b2acb7fd66b6fe2faf6f56add326445571367142481d1353c8b19cae918f742cebc504ae83948834b8da705764cbb66d288f06142c8e83c6a53f1b648f1b6e7931a1d862e713577961906543acdeeaa1577340184d5eccffacf29f7bd363e7a52dceec6339f20fbeb3e48595c3c09948f719dd9e799a4b7a1c3adb008369394a0ff6eadfb260a40690465a72e3e1c26a638d65034c86f93494b729e328fbd11d6d6580346d739df021f12cb3bdf3b597340009db31cae3768e8e3fe13693dbc140a346a02de71bf51bfa5d6e2480c37aff1435d84a082098d99a0621e64a1b3b5605d5d51a4676ec532b242041d5e9fb601826e7a2a2560ef6a4daf4ecc6531e8a37dd8b6b430c3297238aaf403bb2ffb8c557c5a73e93baf1661c8a7aafe3d100603129be2900f4f4d3e031df939ee4cbebc7d8a71ddaf272cb60070dbef26ecd3bf3071a8e9f651b6dfdc94cdea684fb00be5c3f66e4edc841a64db92d3cb6405acd7cd11e69f0e190037b128a90170a4c2333229d9a35448a942dbd839515ff212a6d50b1f14ae6f34a00de9929c7c5829dfc5d94dd977c43914e991c979f228ec1e28ef393fb4cd4ef53a8fb4032671c1a72d6a3c5f1f90d501a0615dc6c84bd04c9288a34b03cb5dbf7d3d015b7ea00f6184efbb643fe17554d873d13623a0b759b8dc6a3eab702298335ec86da8118d9f1e20a316a02c52611aa7f6d27483dcd117932ff35123bc14a7223bf1a7a631291eecb13196951730d81779c824c89c3ca15c2c28fd234d1d801783759c031dc9a4270963ea878f9f56a66853cc816baf25764e", 0x1000}], 0x1, &(0x7f0000003240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5, r8}}}, @rights={{0x20, 0x1, 0x1, [r9, r10, r11, r12]}}, @rights={{0x10}}], 0xb0, 0x40004000}}], 0x4, 0x800) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) (async) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r15}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 272.181966][T29321] device vlan2 entered promiscuous mode [ 272.187597][T29321] device gretap0 entered promiscuous mode [ 272.258534][T29321] device gretap0 left promiscuous mode 01:51:45 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xca020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:45 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xee01, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fstat(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r3, 0x0) (async) r4 = getgid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003040)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000003140)=0xe8) (async) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./control\x00', r7, r8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000003180)={{0x1, 0x1, 0x18, r1, {0x10001}}, './file0\x00'}) (async) r10 = syz_open_dev$vcsn(&(0x7f00000031c0), 0x7, 0x509100) (async) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000003200)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1c, 0x22, 0x7e2881d4b0058261, 0x0, 0x0, {0x9}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="c8cc664d"}]}, 0x1c}}, 0x0) sendmmsg$unix(r1, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="a2ecaa25e19e13e30281b75bef9df4abf84d9465ab2384674e65d2e79821faaeb1e017cb5a15e23b8403854f066e728c723e5d2249eff59b6cee3909a12f1bf9508e82aa3603950f883d93182dbf2aa63129a7d38033513f8ef9f08d7f211440244159b7e8d9eee2a310bc78de63ea6d165e3fe582f27914e78a3afd74504dd1ca7f275046f439821ea5a0c4abe777240271a62ebc3492a12e8cd16d0c4a91b86a480047694f916bf38a7f0a7edcdafa2136f65c3b3c9c967cbd7bb5514602522e899dff4b586685ea54ff1869420c7cf3ddc39fe1cc5173a116c85ef41eddd14c52", 0xe2}], 0x1, &(0x7f0000000300)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x98}}, {{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000480)="2d248235dd212f4c56a1422f5c3f85210c070491ec810ee15f60e7be5de35c971818dac01651cd35b1c1840b61e7eb7025a909a83278093845686a8ed903009febdc603deaffc70caed29f384a8d2fc11f00b240444f193b7913743e494c3b4c5ebc1c10a26198b141587df8382c4d1042754169fc", 0x75}, {&(0x7f0000000500)="69b75aa1a216c0e143944e95c01fe26837779d77b528f1590b04aefd467243ae16996d2adba313e5d745352524974d12a57a612136383b5adcdda99731907b5090a4d51354972d1857afffe68c284711c406b30318335bb8c4835ce0c153effe7b3af5c579e9b65c16024037d8315c1b9b7033e7ef0178517b1938e064c6821f1d3628b7b7c95255f95cba51ca9dff13c3b7c1faf092e58e349375b0f45a3337bb165ae0379e73a1d6648606d01312b98353c8d9563b577b1c685196297244037f72561d2caf3945576f6ab01719e9a3c449c6e678157327700e546fbf05f3baa62ff03a7e801d67d15224cffcf7962e90", 0xf1}, {&(0x7f0000000600)="d94c0e1d4d1f62c7871aa1eed2440c7d1f5832edb1b01bdddfde1f27c299103d54cfb5560d4bae60e3eb7a59a13ab99f259019f9c6b965bb16de33a01f252f676f83f05885762e73ca013e31677b8b596400ab7b27286bb63237586a0db57869b8a4fd4b480924ce88f08a52db895775be76644fc9def2d98e77d25dc6c3984ebdbb9aea142821298257a7d65c62005f9c66f8d0e107d66294b4133f37962bcd5fdb3cc3f632b413cb5ed1099f09dd1437a7e484182618877c0f065846720cd5f2472e4211840a308bf89964cbda77ebda87dd9ecd1424dbb0fecca9f6e4ae7e74691419", 0xe4}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="88984049b8f47e70665740b67d4cfb2ca7267d4e292e139676feb74ba1a7bd1ed7689f4b004f7c53efba0c837766dd47b30e8266ce6f8a0045f9a6876988c3d4be7cdc98d0e597259384f5f7684698f744fbbfe83ccf2ce5", 0x58}, {&(0x7f0000001780)="c7c2fc4247fd787dffaada0d20d81a5f5dba63c5d7814fbd50b24d9c6cc19417c719e9d50fb0a9023b76a73add6d299077dd347ed13c175777844fd24570b2d8b4423401fc4fde1c82eeda96a1da1e3a582def5e80bd75dea48f166dde1b180abfa08814b0db4a3b02a8efae4bd4ba0470869fbf3608857a3789306a87d9c7033ba1a4cc38c5a83bcd18578c84075812e5cde6857b118b9b5bd8d3d0d812909ae4c37dfe3b024a862f23d48ad40293019e96b0eac12b49687a9a1ca8d083334ea18e1027a3c86b48eb3e6775384b12ecea50021f3ca9bcff8c8888edc3bfb810c95fc2c4c617e28ddc7793618a3ccdb29d1716e87c9e", 0xf6}], 0x6, 0x0, 0x0, 0x2000c040}}, {{&(0x7f0000001900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001980)="85c017af524bc2cf8b4a2335c16137e5820f3c5613ff7860462143f9292fc77608e26398d1aa2bed54b1b8dcbf7fa77923b0d5371aeac970b5a3365100e4f5e7469ca9dd6cca340e7b5421bd980250bc48bf3c01b2b4383a24a21fccb497ac0294a74b94efbada6ac69cce098981366bb10a26fa8d313b7da2c82ceefa6742fadde532bd8fa49c2be9fcca39df9159947f71500022f35cd85a94128951b7e45ff9712f4ebba287a6b8a45e014a75bd11a0ee60d7616cb8e50afad79ae2b4e852f88feddc7c79cfc459c7cec7463b0acbe6e936281de4cfcc7636", 0xda}, {&(0x7f0000001a80)="34f463ef434323448ecab331794172546d716f7015ded2f65d2bb01236d224dedef9a473e043790e3ff238cf48484c5ed05d1fb1ee6063b0a1c815be4556a6ad273e7e989092a324828978a53fc7cb63b2f39c3585befb", 0x57}, {&(0x7f0000001b00)="5081d9a7b04506179ebd1e6fbe73e917ae30949afe13fd263ce5bf1aa88847d855e796b37f78fcc7273e987d8db4ff50a4fcb9b9e6e59e6cbcb33eaa860a96f5b8d7", 0x42}, {&(0x7f0000001b80)="e6be0008a8c9629d7edc0481ed54a0e0312f683e4abb01b4ac693a3d0607372366cef0da52f44ff49038613af4729fd22adacb953b44ad31f6ab50d27b72a8ce87ea34f41a25", 0x46}, {&(0x7f0000001c00)="92d740bfd1fd123c86812018a1cabaf5d40553ccb2dab3952cc185dc71859201f1b5a7de07d1ef67d432306639c9724719199fb6c57bdf080558329aba7d586c1205fc34458473b3ef069c6cdf292fb876b52a83e135339d60f099c86eedecec39", 0x61}, {&(0x7f0000001c80)="7755200570ec04957b1d6e1ab8e414b472f265e3799b6f3abec227a9a96220e2ef3b3aadbdd2d164e803809d1542613f3250c49e14d8acfdfc6e6cf44a16639f0acb74e0afe149367aef908d2c5f97c640b2e315ad14749e16d67c3136844a6990ccecc58d3723b87d007c87474db92524a6a0c52716afdbf3996e7fe178b69228c5cf25b78b39998ff601a8c87385dd133e5469d7dd603d86d99cebd115176f497b3250bd55e6ff4020f5c99d0f7908ecc0f8797e805f054a5e595e91ffef5097ebb945efc141f72c72a7865dca103cf19022a64c", 0xd5}, {&(0x7f0000001d80)="95888514cec0d14314c6c554c616f820fa92dec525f80ff60be066289b41ff2b5abba5a8883a0ef252a97c6fa72bd683ff970bd0bb0505c2e01bac54fad3dc48d89e62fce56c168ef5e447d354e80b841890b885d55a7457b5131919a66246b1a86211bf904d12a9887faf95fb34899a5d601e0ebc60d5a8f6b1799c1e2e7ad9c81d141317a405d78d0c169609494afa5c123f3374860624114012f2dc2cf541273c", 0xa2}, {&(0x7f0000001e40)="f67d4dbf22b99deb64fb6ef69c21b55736604c45a73ecbecdec9d2171dab01f96d703e97f924f2d593909ee80de433e189ed079b8f62f150c6feaf61dd9fd2cd1efdcea8cdf127e2bdcb1a07fe0bc399cf06f787ba528735c91435462102e0e798be82dbc3bbfc72e16f714fc67e3064a13b43ece34eaf88ba311e8892f3719c65b8e1f41e1cedaabc59a0f614b07aaedc07c0cc053fa9312d0848089298fd", 0x9f}], 0x8, 0x0, 0x0, 0x8800}}, {{&(0x7f0000001f80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000002000)="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", 0x1000}], 0x1, &(0x7f0000003240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5, r8}}}, @rights={{0x20, 0x1, 0x1, [r9, r10, r11, r12]}}, @rights={{0x10}}], 0xb0, 0x40004000}}], 0x4, 0x800) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) (async) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r15}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:45 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async, rerun: 32) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 01:51:45 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:45 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:45 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000002500000095d05ff9f19a98745f140066d0d3ad924f8a71462f1d96dfe0a2de28cf1aa669bdccecff348dd5be873855b961b1956fb751be0afbc2a666beeb83dfe498994c6d41c1296b"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@loopback, @in=@empty, 0x4e20, 0x0, 0x4e20, 0x8000, 0xa, 0x80}, {0x0, 0x8, 0x8, 0xb7, 0x80000000, 0x40, 0xfffffffffffffffa, 0x7ff}, {0x3f, 0x31, 0x7, 0x9}, 0x7fff, 0x0, 0x1, 0x41bd3b92e45840b9, 0x7, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x8e}, 0xa, @in=@remote, 0x3500, 0x4, 0x2, 0x1f, 0x80000000, 0x3, 0x3}}, 0xe8) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:45 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000220061820000000000000000090000000414299d091d8bbe"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x8}, @void, @val={0xc, 0x99, {0x7fffffff, 0xa}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1c, 0x22, 0x7e2881d4b0058261, 0x0, 0x0, {0x9}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="c8cc664d"}]}, 0x1c}}, 0x0) splice(r2, &(0x7f0000000080)=0xdbc, r3, &(0x7f00000000c0)=0x3ff, 0x4, 0x2) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@bridge_newvlan={0x74, 0x70, 0x2, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x8}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x1}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xe}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008080) socket(0x10, 0x5, 0x9) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'lo\x00'}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:45 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async, rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async, rerun: 64) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:45 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000002500000095d05ff9f19a98745f140066d0d3ad924f8a71462f1d96dfe0a2de28cf1aa669bdccecff348dd5be873855b961b1956fb751be0afbc2a666beeb83dfe498994c6d41c1296b"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@loopback, @in=@empty, 0x4e20, 0x0, 0x4e20, 0x8000, 0xa, 0x80}, {0x0, 0x8, 0x8, 0xb7, 0x80000000, 0x40, 0xfffffffffffffffa, 0x7ff}, {0x3f, 0x31, 0x7, 0x9}, 0x7fff, 0x0, 0x1, 0x41bd3b92e45840b9, 0x7, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x8e}, 0xa, @in=@remote, 0x3500, 0x4, 0x2, 0x1f, 0x80000000, 0x3, 0x3}}, 0xe8) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) [ 272.433236][T29376] device vlan2 entered promiscuous mode [ 272.438861][T29376] device gretap0 entered promiscuous mode 01:51:45 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8}]}}]}, 0x94}}, 0x0) r2 = dup3(r1, r1, 0x80000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2097}, @map_fd={0x18, 0x9}, @call={0x85, 0x0, 0x0, 0x80}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x87, &(0x7f00000001c0)=""/135, 0x41000, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xf, 0x9, 0xfa9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r2, r3]}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000640), 0x240082, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) [ 272.495871][T29376] device gretap0 left promiscuous mode 01:51:45 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) 01:51:45 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xcc020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:45 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8}]}}]}, 0x94}}, 0x0) r2 = dup3(r1, r1, 0x80000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2097}, @map_fd={0x18, 0x9}, @call={0x85, 0x0, 0x0, 0x80}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x87, &(0x7f00000001c0)=""/135, 0x41000, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xf, 0x9, 0xfa9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r2, r3]}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000640), 0x240082, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8}]}}]}, 0x94}}, 0x0) (async) dup3(r1, r1, 0x80000) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2097}, @map_fd={0x18, 0x9}, @call={0x85, 0x0, 0x0, 0x80}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x87, &(0x7f00000001c0)=""/135, 0x41000, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xf, 0x9, 0xfa9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r2, r3]}, 0x80) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000640), 0x240082, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) (async) 01:51:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x1, 0x803, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000220061820000000000000000090000000414299d091d8bbe"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x8}, @void, @val={0xc, 0x99, {0x7fffffff, 0xa}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1c, 0x22, 0x7e2881d4b0058261, 0x0, 0x0, {0x9}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="c8cc664d"}]}, 0x1c}}, 0x0) (async) splice(r2, &(0x7f0000000080)=0xdbc, r3, &(0x7f00000000c0)=0x3ff, 0x4, 0x2) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@bridge_newvlan={0x74, 0x70, 0x2, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x8}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x1}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xe}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008080) (async) socket(0x10, 0x5, 0x9) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'lo\x00'}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:45 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:46 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_SET_FD(r5, 0x4c00, r2) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) poll(&(0x7f00000005c0)=[{r2, 0x2221}, {r1}, {0xffffffffffffffff, 0x310}, {0xffffffffffffffff, 0x46c6}, {0xffffffffffffffff, 0x44}, {0xffffffffffffffff, 0xa349}, {r3, 0x4082}, {0xffffffffffffffff, 0x8314}, {0xffffffffffffffff, 0x9070}, {0xffffffffffffffff, 0x50}], 0xa, 0x964) 01:51:46 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000005c0)=""/156, 0x9c}, {&(0x7f0000000680)=""/188, 0xbc}, {&(0x7f00000001c0)}, {&(0x7f0000000240)=""/18, 0x12}, {&(0x7f0000000740)=""/214, 0xd6}, {&(0x7f0000000840)=""/211, 0xd3}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000000940)=""/52, 0x34}, {&(0x7f0000000980)=""/149, 0x95}], 0xa, &(0x7f0000000b00)=""/113, 0x71}, 0x4}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b80)=""/231, 0xe7}, {&(0x7f0000000e00)=""/4096, 0x1000}], 0x2}, 0x8}, {{&(0x7f0000000cc0)=@alg, 0x80, &(0x7f0000000d40)=[{&(0x7f0000001e00)=""/77, 0x4d}], 0x1, &(0x7f0000001e80)=""/193, 0xc1}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000001f80)=""/100, 0x64}, {&(0x7f0000002000)=""/4096, 0x1000}], 0x2, &(0x7f0000003040)=""/77, 0x4d}, 0x4}], 0x4, 0x22, &(0x7f00000031c0)) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000220061820000000000000000090000000414299d091d8bbe"], 0x1c}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x8}, @void, @val={0xc, 0x99, {0x7fffffff, 0xa}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1c, 0x22, 0x7e2881d4b0058261, 0x0, 0x0, {0x9}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="c8cc664d"}]}, 0x1c}}, 0x0) splice(r2, &(0x7f0000000080)=0xdbc, r3, &(0x7f00000000c0)=0x3ff, 0x4, 0x2) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@bridge_newvlan={0x74, 0x70, 0x2, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x8}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x1}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xe}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008080) (async) socket(0x10, 0x5, 0x9) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'lo\x00'}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 272.665568][T29437] device vlan2 entered promiscuous mode [ 272.671239][T29437] device gretap0 entered promiscuous mode 01:51:46 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8}]}}]}, 0x94}}, 0x0) r2 = dup3(r1, r1, 0x80000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2097}, @map_fd={0x18, 0x9}, @call={0x85, 0x0, 0x0, 0x80}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x87, &(0x7f00000001c0)=""/135, 0x41000, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xf, 0x9, 0xfa9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r2, r3]}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000640), 0x240082, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 01:51:46 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000005c0)=""/156, 0x9c}, {&(0x7f0000000680)=""/188, 0xbc}, {&(0x7f00000001c0)}, {&(0x7f0000000240)=""/18, 0x12}, {&(0x7f0000000740)=""/214, 0xd6}, {&(0x7f0000000840)=""/211, 0xd3}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000000940)=""/52, 0x34}, {&(0x7f0000000980)=""/149, 0x95}], 0xa, &(0x7f0000000b00)=""/113, 0x71}, 0x4}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b80)=""/231, 0xe7}, {&(0x7f0000000e00)=""/4096, 0x1000}], 0x2}, 0x8}, {{&(0x7f0000000cc0)=@alg, 0x80, &(0x7f0000000d40)=[{&(0x7f0000001e00)=""/77, 0x4d}], 0x1, &(0x7f0000001e80)=""/193, 0xc1}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000001f80)=""/100, 0x64}, {&(0x7f0000002000)=""/4096, 0x1000}], 0x2, &(0x7f0000003040)=""/77, 0x4d}, 0x4}], 0x4, 0x22, &(0x7f00000031c0)) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) [ 272.710019][T29437] device gretap0 left promiscuous mode 01:51:46 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='bcache_read\x00', r0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) recvfrom$l2tp6(r2, &(0x7f0000000140)=""/218, 0xda, 0x2100, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 01:51:46 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:46 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e000000002000028006000100000000000c0002000e0000000a0000000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB="650a35ae", @ANYRES32=r2, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:46 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xce020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:46 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='bcache_read\x00', r0}, 0x10) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (rerun: 64) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) recvfrom$l2tp6(r2, &(0x7f0000000140)=""/218, 0xda, 0x2100, 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async, rerun: 64) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async, rerun: 64) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 01:51:46 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000005c0)=""/156, 0x9c}, {&(0x7f0000000680)=""/188, 0xbc}, {&(0x7f00000001c0)}, {&(0x7f0000000240)=""/18, 0x12}, {&(0x7f0000000740)=""/214, 0xd6}, {&(0x7f0000000840)=""/211, 0xd3}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000000940)=""/52, 0x34}, {&(0x7f0000000980)=""/149, 0x95}], 0xa, &(0x7f0000000b00)=""/113, 0x71}, 0x4}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b80)=""/231, 0xe7}, {&(0x7f0000000e00)=""/4096, 0x1000}], 0x2}, 0x8}, {{&(0x7f0000000cc0)=@alg, 0x80, &(0x7f0000000d40)=[{&(0x7f0000001e00)=""/77, 0x4d}], 0x1, &(0x7f0000001e80)=""/193, 0xc1}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000001f80)=""/100, 0x64}, {&(0x7f0000002000)=""/4096, 0x1000}], 0x2, &(0x7f0000003040)=""/77, 0x4d}, 0x4}], 0x4, 0x22, &(0x7f00000031c0)) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:46 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e000000002000028006000100000000000c0002000e0000000a0000000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB="650a35ae", @ANYRES32=r2, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e000000002000028006000100000000000c0002000e0000000a0000000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB="650a35ae", @ANYRES32=r2, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) (async) [ 272.881024][ T5616] udevd[5616]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 272.893467][T29500] device vlan2 entered promiscuous mode [ 272.899151][T29500] device gretap0 entered promiscuous mode [ 272.910066][T29500] device gretap0 left promiscuous mode 01:51:46 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_SET_FD(r5, 0x4c00, r2) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) poll(&(0x7f00000005c0)=[{r2, 0x2221}, {r1}, {0xffffffffffffffff, 0x310}, {0xffffffffffffffff, 0x46c6}, {0xffffffffffffffff, 0x44}, {0xffffffffffffffff, 0xa349}, {r3, 0x4082}, {0xffffffffffffffff, 0x8314}, {0xffffffffffffffff, 0x9070}, {0xffffffffffffffff, 0x50}], 0xa, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_SET_FD(r5, 0x4c00, r2) (async) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) (async) poll(&(0x7f00000005c0)=[{r2, 0x2221}, {r1}, {0xffffffffffffffff, 0x310}, {0xffffffffffffffff, 0x46c6}, {0xffffffffffffffff, 0x44}, {0xffffffffffffffff, 0xa349}, {r3, 0x4082}, {0xffffffffffffffff, 0x8314}, {0xffffffffffffffff, 0x9070}, {0xffffffffffffffff, 0x50}], 0xa, 0x964) (async) 01:51:46 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:46 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e000000002000028006000100000000000c0002000e0000000a0000000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB="650a35ae", @ANYRES32=r2, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:46 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="73797a309165d427a965a0d2410ee232067c34f8e751299d10549ac55a9c678601fddfba3c7bbb4aecbaacea56ebabde2825ab0cb5ea8df873106ecfd8"], 0x3d) 01:51:46 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='bcache_read\x00', r0}, 0x10) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async, rerun: 32) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async, rerun: 32) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) (async) recvfrom$l2tp6(r2, &(0x7f0000000140)=""/218, 0xda, 0x2100, 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 01:51:46 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xd0020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:46 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:46 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xc}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}, @IFLA_WEIGHT={0x8, 0xf, 0x3}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:46 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="73797a309165d427a965a0d2410ee232067c34f8e751299d10549ac55a9c678601fddfba3c7bbb4aecbaacea56ebabde2825ab0cb5ea8df873106ecfd8"], 0x3d) 01:51:46 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18007390f9f8bfdfe8d200000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4a) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) [ 273.532601][T29508] __nla_validate_parse: 9 callbacks suppressed [ 273.532614][T29508] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 273.555064][T29511] device vlan2 entered promiscuous mode [ 273.560727][T29511] device gretap0 entered promiscuous mode 01:51:46 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18007390f9f8bfdfe8d200000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4a) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:46 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xc}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}, @IFLA_WEIGHT={0x8, 0xf, 0x3}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xc}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}, @IFLA_WEIGHT={0x8, 0xf, 0x3}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) (async) [ 273.591270][T29511] device gretap0 left promiscuous mode 01:51:46 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_SET_FD(r5, 0x4c00, r2) (async) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) (async) poll(&(0x7f00000005c0)=[{r2, 0x2221}, {r1}, {0xffffffffffffffff, 0x310}, {0xffffffffffffffff, 0x46c6}, {0xffffffffffffffff, 0x44}, {0xffffffffffffffff, 0xa349}, {r3, 0x4082}, {0xffffffffffffffff, 0x8314}, {0xffffffffffffffff, 0x9070}, {0xffffffffffffffff, 0x50}], 0xa, 0x964) 01:51:46 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:46 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18007390f9f8bfdfe8d200000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4a) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:46 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="73797a309165d427a965a0d2410ee232067c34f8e751299d10549ac55a9c678601fddfba3c7bbb4aecbaacea56ebabde2825ab0cb5ea8df873106ecfd8"], 0x3d) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="73797a309165d427a965a0d2410ee232067c34f8e751299d10549ac55a9c678601fddfba3c7bbb4aecbaacea56ebabde2825ab0cb5ea8df873106ecfd8"], 0x3d) (async) 01:51:47 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xd2020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:47 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xc}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}, @IFLA_WEIGHT={0x8, 0xf, 0x3}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:47 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:47 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:47 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb62974bfaa4dea4a}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@getneigh={0x14, 0x1e, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = signalfd4(r1, &(0x7f0000000000)={[0x100000000]}, 0x8, 0x800) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast1}, r2}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:47 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x25000000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:47 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb62974bfaa4dea4a}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@getneigh={0x14, 0x1e, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = signalfd4(r1, &(0x7f0000000000)={[0x100000000]}, 0x8, 0x800) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast1}, r2}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb62974bfaa4dea4a}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@getneigh={0x14, 0x1e, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) signalfd4(r1, &(0x7f0000000000)={[0x100000000]}, 0x8, 0x800) (async) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast1}, r2}, 0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) (async) 01:51:47 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='btrfs_inode_mod_outstanding_extents\x00', r0}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) [ 273.703367][T29584] device vlan2 entered promiscuous mode [ 273.709345][T29584] device gretap0 entered promiscuous mode [ 273.723330][T29584] device gretap0 left promiscuous mode 01:51:47 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0xfffff000) perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x80, 0x5, 0x6, 0x0, 0x1, 0x0, 0x10001, 0x20040, 0xdf885f3d7ad70b9e, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x24, 0x0, @perf_bp={&(0x7f0000000140)}, 0x4, 0x8000, 0x14ec6b83, 0x8, 0x80, 0x101, 0x8001, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0x6, r1, 0x4) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:47 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600a0000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:47 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f00000005c0)=""/197, 0xc5}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f0000000400)=""/175, 0xaf}, {&(0x7f00000001c0)=""/54, 0x36}], 0x5, &(0x7f0000000840)=""/114, 0x72}, 0x10000) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:47 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb62974bfaa4dea4a}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@getneigh={0x14, 0x1e, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) (async) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r3 = signalfd4(r1, &(0x7f0000000000)={[0x100000000]}, 0x8, 0x800) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast1}, r2}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:47 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xd2030000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:47 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='btrfs_inode_mod_outstanding_extents\x00', r0}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 01:51:47 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:47 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1c, 0x22, 0x7e2881d4b0058261, 0x0, 0x0, {0x9}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="c8cc664d"}]}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'vcan0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="10820000000000003000128009000100766c616e000000002000028006000100000000000c0002000e0000000a0000000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="cd32803b2fc063cbd161d89004d1825d39a4ac7004523bdd3642e2c32a"], 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:47 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='btrfs_inode_mod_outstanding_extents\x00', r0}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 01:51:47 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0xfffff000) (async) perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x80, 0x5, 0x6, 0x0, 0x1, 0x0, 0x10001, 0x20040, 0xdf885f3d7ad70b9e, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x24, 0x0, @perf_bp={&(0x7f0000000140)}, 0x4, 0x8000, 0x14ec6b83, 0x8, 0x80, 0x101, 0x8001, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0x6, r1, 0x4) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:47 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81ffffff}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:47 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1c, 0x22, 0x7e2881d4b0058261, 0x0, 0x0, {0x9}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="c8cc664d"}]}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'vcan0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="10820000000000003000128009000100766c616e000000002000028006000100000000000c0002000e0000000a0000000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="cd32803b2fc063cbd161d89004d1825d39a4ac7004523bdd3642e2c32a"], 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1c, 0x22, 0x7e2881d4b0058261, 0x0, 0x0, {0x9}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="c8cc664d"}]}, 0x1c}}, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'vcan0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="10820000000000003000128009000100766c616e000000002000028006000100000000000c0002000e0000000a0000000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="cd32803b2fc063cbd161d89004d1825d39a4ac7004523bdd3642e2c32a"], 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) (async) [ 274.548550][T29609] device vlan2 entered promiscuous mode [ 274.554136][T29609] device gretap0 entered promiscuous mode [ 274.571942][T29609] device gretap0 left promiscuous mode 01:51:47 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:47 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xeaffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:47 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f00000005c0)=""/197, 0xc5}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f0000000400)=""/175, 0xaf}, {&(0x7f00000001c0)=""/54, 0x36}], 0x5, &(0x7f0000000840)=""/114, 0x72}, 0x10000) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:47 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x1, 0x803, 0x0) (rerun: 64) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1c, 0x22, 0x7e2881d4b0058261, 0x0, 0x0, {0x9}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="c8cc664d"}]}, 0x1c}}, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'vcan0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="10820000000000003000128009000100766c616e000000002000028006000100000000000c0002000e0000000a0000000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="cd32803b2fc063cbd161d89004d1825d39a4ac7004523bdd3642e2c32a"], 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) (rerun: 64) 01:51:47 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0xfffff000) (async) perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x80, 0x5, 0x6, 0x0, 0x1, 0x0, 0x10001, 0x20040, 0xdf885f3d7ad70b9e, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x24, 0x0, @perf_bp={&(0x7f0000000140)}, 0x4, 0x8000, 0x14ec6b83, 0x8, 0x80, 0x101, 0x8001, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0x6, r1, 0x4) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async, rerun: 32) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async, rerun: 32) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (rerun: 32) 01:51:48 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x9e1b0000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:48 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xeaffffff}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:48 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:48 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f00000005c0)=""/197, 0xc5}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f0000000400)=""/175, 0xaf}, {&(0x7f00000001c0)=""/54, 0x36}], 0x5, &(0x7f0000000840)=""/114, 0x72}, 0x10000) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f00000005c0)=""/197, 0xc5}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f0000000400)=""/175, 0xaf}, {&(0x7f00000001c0)=""/54, 0x36}], 0x5, &(0x7f0000000840)=""/114, 0x72}, 0x10000) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) 01:51:48 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) [ 274.686717][T29660] device vlan2 entered promiscuous mode [ 274.692426][T29660] device gretap0 entered promiscuous mode [ 274.713347][T29660] device gretap0 left promiscuous mode 01:51:48 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) 01:51:48 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xfffffd6a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000140)={0x6, 0x3, 0xf8b, 0x1, 0x3, "3db258c38de363fedd46b2821fe2e7c791052a", 0x8e, 0x400}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:48 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x338d, 0x87d3, 0x2, &(0x7f0000000180)={[0x7]}, 0x8) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) [ 274.761561][T29661] device vlan2 entered promiscuous mode [ 274.767158][T29661] device gretap0 entered promiscuous mode [ 274.774891][T29661] device gretap0 left promiscuous mode 01:51:48 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async, rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x338d, 0x87d3, 0x2, &(0x7f0000000180)={[0x7]}, 0x8) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async, rerun: 64) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async, rerun: 32) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async, rerun: 32) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:48 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xefffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:48 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:48 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f30139a40db687400000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) bind$nfc_llcp(r1, &(0x7f0000000180)={0x27, 0x0, 0x1, 0x6, 0x1, 0x7f, "6ca9da4eadc4a40f6560648095106a1ace591c75af13fe3d6998461e071294f425bbbb765b44a0b9363fd05b520ccd9799046c26abce2ea3ef39f5fff229f4", 0x5}, 0x60) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 01:51:48 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="189bfd0000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x9, @private1, 0x1f, 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000e00)={{r4}, 0x0, 0x10, @inherit={0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="000000002000007d40cf96d8ac487c0f9b53e184fbf0c3000000000000000000000100000014e4ffffffffff0402000000000c00000700000000000000000800000000000005000000000000007a000000000000000000001000000000000000"]}, @subvolid=0x8}) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r6, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r3, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:48 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:48 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xfffffd6a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000140)={0x6, 0x3, 0xf8b, 0x1, 0x3, "3db258c38de363fedd46b2821fe2e7c791052a", 0x8e, 0x400}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:48 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="189bfd0000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x9, @private1, 0x1f, 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000e00)={{r4}, 0x0, 0x10, @inherit={0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="000000002000007d40cf96d8ac487c0f9b53e184fbf0c3000000000000000000000100000014e4ffffffffff0402000000000c00000700000000000000000800000000000005000000000000007a000000000000000000001000000000000000"]}, @subvolid=0x8}) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r6, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r3, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:48 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 01:51:48 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff0000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:48 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="189bfd0000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x9, @private1, 0x1f, 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000e00)={{r4}, 0x0, 0x10, @inherit={0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="000000002000007d40cf96d8ac487c0f9b53e184fbf0c3000000000000000000000100000014e4ffffffffff0402000000000c00000700000000000000000800000000000005000000000000007a000000000000000000001000000000000000"]}, @subvolid=0x8}) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r6, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r3, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) [ 274.880386][T29729] device vlan2 entered promiscuous mode [ 274.885978][T29729] device gretap0 entered promiscuous mode [ 274.907186][T29729] device gretap0 left promiscuous mode 01:51:48 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xfffffd6a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async, rerun: 32) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000140)={0x6, 0x3, 0xf8b, 0x1, 0x3, "3db258c38de363fedd46b2821fe2e7c791052a", 0x8e, 0x400}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (rerun: 64) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async, rerun: 32) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (rerun: 32) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:48 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x338d, 0x87d3, 0x2, &(0x7f0000000180)={[0x7]}, 0x8) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:48 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:48 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xf0020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:48 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xefffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:48 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8}]}}]}, 0x94}}, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="7f443cc38ddb495b04b5a6e2c7df8b307f4937689f9142e907c51ef801cce56514ba0ac087ffb0aaa991c0d06cd5102caa629a960eacd5593e4f3b900fc07754aec3a68cec6cc496fb83e8364904a528af566faf405a6229bd98b374b68c01b2d3c8ed083e9d0142d47d2a725872a8c816b9f710f346a48f428ffbf91398d499a201ca5bcbc9bd8fc90818d9642ac1e2672e8da9ad74de9ec5f2c643ef4f3475fe10a59aaa2b1b1a7dbf06e95e58b7759d0bf672c71e96f2938b", 0xba}, {&(0x7f0000000400)="35501f55e5819c07a551276739973f70356c5acc08f6b037485ceb289eabafa09e55fae6cec7e93cf4226148d9fdde7c7ef00844c0915a67ea8e30548e71a6d7651b7b573e7c43c4586210e4eccdb8a850d52fa97f73dccdff715b4b00753b24fdedffa17e4b45968f61ae75cdc06893f0958e1c9486aa1e851f98a7e6419bc5d1e15cb89335", 0x86}, {&(0x7f00000005c0)="e34fc4c3966ace4a02b9253cdf29149e6e35a97d18cd53dc9f093fa7b8b5973872ddefbb1c768139e401673f0c9f749d7e337b9212107c0770805eaffd2d5f6a89fdad8fa471afe43d720238c7c987f1bd910b44a101453780999bfd50d0e36df4f92ec03b5f7965ce0660fb24df29c68ca8a477956125457bd3a50932b4abb28bbab0db4edead5a33ea2c0c5829d8fa543987d88ee9fc9afce78921d3f4101b3c0e8249a4fbb6dd50adbd73b22be7193bd5e468bbe4a60e831a74ac", 0xbc}], 0x3, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x89, 0x4, "73fc"}, @noop]}}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x54, 0x32, 0x3, 0xe, [{@rand_addr=0x64010100, 0x9}, {@broadcast, 0xffb40}, {@rand_addr=0x64010102, 0xff}, {@rand_addr=0x64010101, 0x7}, {@multicast2, 0x7}, {@broadcast, 0x7}, {@loopback, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010101, 0xff}, {@rand_addr=0x64010100, 0x100}]}, @generic={0x89, 0xd, "ee903c0702083005f66477"}, @timestamp={0x44, 0x10, 0x63, 0x0, 0x1, [0x5, 0x3f, 0xffffffff]}, @timestamp={0x44, 0xc, 0xa2, 0x0, 0x7, [0x8, 0x4]}, @cipso={0x86, 0x25, 0x3, [{0x0, 0x10, "a43028492b841a8449d7b1ae7e99"}, {0x6, 0x8, "9f135c46cdbe"}, {0x0, 0x7, "e804738757"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @rand_addr=0x64010100}}}], 0x140}, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:48 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 275.041838][T29763] device vlan2 entered promiscuous mode [ 275.047467][T29763] device gretap0 entered promiscuous mode [ 275.063245][T29763] device gretap0 left promiscuous mode [ 275.084371][T29762] device vlan2 entered promiscuous mode 01:51:48 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8}]}}]}, 0x94}}, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="7f443cc38ddb495b04b5a6e2c7df8b307f4937689f9142e907c51ef801cce56514ba0ac087ffb0aaa991c0d06cd5102caa629a960eacd5593e4f3b900fc07754aec3a68cec6cc496fb83e8364904a528af566faf405a6229bd98b374b68c01b2d3c8ed083e9d0142d47d2a725872a8c816b9f710f346a48f428ffbf91398d499a201ca5bcbc9bd8fc90818d9642ac1e2672e8da9ad74de9ec5f2c643ef4f3475fe10a59aaa2b1b1a7dbf06e95e58b7759d0bf672c71e96f2938b", 0xba}, {&(0x7f0000000400)="35501f55e5819c07a551276739973f70356c5acc08f6b037485ceb289eabafa09e55fae6cec7e93cf4226148d9fdde7c7ef00844c0915a67ea8e30548e71a6d7651b7b573e7c43c4586210e4eccdb8a850d52fa97f73dccdff715b4b00753b24fdedffa17e4b45968f61ae75cdc06893f0958e1c9486aa1e851f98a7e6419bc5d1e15cb89335", 0x86}, {&(0x7f00000005c0)="e34fc4c3966ace4a02b9253cdf29149e6e35a97d18cd53dc9f093fa7b8b5973872ddefbb1c768139e401673f0c9f749d7e337b9212107c0770805eaffd2d5f6a89fdad8fa471afe43d720238c7c987f1bd910b44a101453780999bfd50d0e36df4f92ec03b5f7965ce0660fb24df29c68ca8a477956125457bd3a50932b4abb28bbab0db4edead5a33ea2c0c5829d8fa543987d88ee9fc9afce78921d3f4101b3c0e8249a4fbb6dd50adbd73b22be7193bd5e468bbe4a60e831a74ac", 0xbc}], 0x3, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x89, 0x4, "73fc"}, @noop]}}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x54, 0x32, 0x3, 0xe, [{@rand_addr=0x64010100, 0x9}, {@broadcast, 0xffb40}, {@rand_addr=0x64010102, 0xff}, {@rand_addr=0x64010101, 0x7}, {@multicast2, 0x7}, {@broadcast, 0x7}, {@loopback, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010101, 0xff}, {@rand_addr=0x64010100, 0x100}]}, @generic={0x89, 0xd, "ee903c0702083005f66477"}, @timestamp={0x44, 0x10, 0x63, 0x0, 0x1, [0x5, 0x3f, 0xffffffff]}, @timestamp={0x44, 0xc, 0xa2, 0x0, 0x7, [0x8, 0x4]}, @cipso={0x86, 0x25, 0x3, [{0x0, 0x10, "a43028492b841a8449d7b1ae7e99"}, {0x6, 0x8, "9f135c46cdbe"}, {0x0, 0x7, "e804738757"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @rand_addr=0x64010100}}}], 0x140}, 0x8040) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) [ 275.090055][T29762] device gretap0 entered promiscuous mode 01:51:48 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800f0020300000000000020001a35c4fc"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x110202, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r2, 0x3000}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x80}, {}, {0xffffffffffffffff, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) [ 275.117710][T29762] device gretap0 left promiscuous mode 01:51:49 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 01:51:49 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8}]}}]}, 0x94}}, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="7f443cc38ddb495b04b5a6e2c7df8b307f4937689f9142e907c51ef801cce56514ba0ac087ffb0aaa991c0d06cd5102caa629a960eacd5593e4f3b900fc07754aec3a68cec6cc496fb83e8364904a528af566faf405a6229bd98b374b68c01b2d3c8ed083e9d0142d47d2a725872a8c816b9f710f346a48f428ffbf91398d499a201ca5bcbc9bd8fc90818d9642ac1e2672e8da9ad74de9ec5f2c643ef4f3475fe10a59aaa2b1b1a7dbf06e95e58b7759d0bf672c71e96f2938b", 0xba}, {&(0x7f0000000400)="35501f55e5819c07a551276739973f70356c5acc08f6b037485ceb289eabafa09e55fae6cec7e93cf4226148d9fdde7c7ef00844c0915a67ea8e30548e71a6d7651b7b573e7c43c4586210e4eccdb8a850d52fa97f73dccdff715b4b00753b24fdedffa17e4b45968f61ae75cdc06893f0958e1c9486aa1e851f98a7e6419bc5d1e15cb89335", 0x86}, {&(0x7f00000005c0)="e34fc4c3966ace4a02b9253cdf29149e6e35a97d18cd53dc9f093fa7b8b5973872ddefbb1c768139e401673f0c9f749d7e337b9212107c0770805eaffd2d5f6a89fdad8fa471afe43d720238c7c987f1bd910b44a101453780999bfd50d0e36df4f92ec03b5f7965ce0660fb24df29c68ca8a477956125457bd3a50932b4abb28bbab0db4edead5a33ea2c0c5829d8fa543987d88ee9fc9afce78921d3f4101b3c0e8249a4fbb6dd50adbd73b22be7193bd5e468bbe4a60e831a74ac", 0xbc}], 0x3, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x89, 0x4, "73fc"}, @noop]}}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x54, 0x32, 0x3, 0xe, [{@rand_addr=0x64010100, 0x9}, {@broadcast, 0xffb40}, {@rand_addr=0x64010102, 0xff}, {@rand_addr=0x64010101, 0x7}, {@multicast2, 0x7}, {@broadcast, 0x7}, {@loopback, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010101, 0xff}, {@rand_addr=0x64010100, 0x100}]}, @generic={0x89, 0xd, "ee903c0702083005f66477"}, @timestamp={0x44, 0x10, 0x63, 0x0, 0x1, [0x5, 0x3f, 0xffffffff]}, @timestamp={0x44, 0xc, 0xa2, 0x0, 0x7, [0x8, 0x4]}, @cipso={0x86, 0x25, 0x3, [{0x0, 0x10, "a43028492b841a8449d7b1ae7e99"}, {0x6, 0x8, "9f135c46cdbe"}, {0x0, 0x7, "e804738757"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @rand_addr=0x64010100}}}], 0x140}, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8}]}}]}, 0x94}}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="7f443cc38ddb495b04b5a6e2c7df8b307f4937689f9142e907c51ef801cce56514ba0ac087ffb0aaa991c0d06cd5102caa629a960eacd5593e4f3b900fc07754aec3a68cec6cc496fb83e8364904a528af566faf405a6229bd98b374b68c01b2d3c8ed083e9d0142d47d2a725872a8c816b9f710f346a48f428ffbf91398d499a201ca5bcbc9bd8fc90818d9642ac1e2672e8da9ad74de9ec5f2c643ef4f3475fe10a59aaa2b1b1a7dbf06e95e58b7759d0bf672c71e96f2938b", 0xba}, {&(0x7f0000000400)="35501f55e5819c07a551276739973f70356c5acc08f6b037485ceb289eabafa09e55fae6cec7e93cf4226148d9fdde7c7ef00844c0915a67ea8e30548e71a6d7651b7b573e7c43c4586210e4eccdb8a850d52fa97f73dccdff715b4b00753b24fdedffa17e4b45968f61ae75cdc06893f0958e1c9486aa1e851f98a7e6419bc5d1e15cb89335", 0x86}, {&(0x7f00000005c0)="e34fc4c3966ace4a02b9253cdf29149e6e35a97d18cd53dc9f093fa7b8b5973872ddefbb1c768139e401673f0c9f749d7e337b9212107c0770805eaffd2d5f6a89fdad8fa471afe43d720238c7c987f1bd910b44a101453780999bfd50d0e36df4f92ec03b5f7965ce0660fb24df29c68ca8a477956125457bd3a50932b4abb28bbab0db4edead5a33ea2c0c5829d8fa543987d88ee9fc9afce78921d3f4101b3c0e8249a4fbb6dd50adbd73b22be7193bd5e468bbe4a60e831a74ac", 0xbc}], 0x3, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x89, 0x4, "73fc"}, @noop]}}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x54, 0x32, 0x3, 0xe, [{@rand_addr=0x64010100, 0x9}, {@broadcast, 0xffb40}, {@rand_addr=0x64010102, 0xff}, {@rand_addr=0x64010101, 0x7}, {@multicast2, 0x7}, {@broadcast, 0x7}, {@loopback, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010101, 0xff}, {@rand_addr=0x64010100, 0x100}]}, @generic={0x89, 0xd, "ee903c0702083005f66477"}, @timestamp={0x44, 0x10, 0x63, 0x0, 0x1, [0x5, 0x3f, 0xffffffff]}, @timestamp={0x44, 0xc, 0xa2, 0x0, 0x7, [0x8, 0x4]}, @cipso={0x86, 0x25, 0x3, [{0x0, 0x10, "a43028492b841a8449d7b1ae7e99"}, {0x6, 0x8, "9f135c46cdbe"}, {0x0, 0x7, "e804738757"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @rand_addr=0x64010100}}}], 0x140}, 0x8040) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) 01:51:49 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1fc, 0xa81c1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:49 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:49 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xf0ffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:49 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1fc, 0xa81c1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) [ 275.819531][T29788] device vlan2 entered promiscuous mode [ 275.825111][T29788] device gretap0 entered promiscuous mode [ 275.832515][T29788] device gretap0 left promiscuous mode 01:51:49 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:49 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, r0, 0x16}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:49 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:49 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xfe0f0000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:49 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, r0, 0x16}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, r0, 0x16}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) 01:51:49 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800f0020300000000000020001a35c4fc"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x110202, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r2, 0x3000}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x80}, {}, {0xffffffffffffffff, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800f0020300000000000020001a35c4fc"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x110202, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r2, 0x3000}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x80}, {}, {0xffffffffffffffff, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) [ 275.934041][T29816] device vlan2 entered promiscuous mode [ 275.939704][T29816] device gretap0 entered promiscuous mode [ 275.955734][T29816] device gretap0 left promiscuous mode 01:51:50 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 01:51:50 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xf0020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:50 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffea}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:50 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xfe800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:50 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, r0, 0x16}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (rerun: 32) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:50 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800f0020300000000000020001a35c4fc"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x110202, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a7142a53a7b8a942693ecf87cbea83b11763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbd07ef274aa294b9999e95c8c8ec26b789b807ad48f61b99cbe73d6c5333f12432d57ad034f30d6ab83ccccc98c7f4b6211bec127faaa99017673e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496bcca4d71227b362a942c59f08cd8e4ba8a46a6e160d3397f9176e7cf3c68f6340a85d96c168e5f1201fe3f1416000000000000"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r2 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r2, 0x3000}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x80}, {}, {0xffffffffffffffff, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:50 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 276.722251][T29855] device vlan2 entered promiscuous mode [ 276.727863][T29855] device gretap0 entered promiscuous mode [ 276.744874][T29855] device gretap0 left promiscuous mode [ 276.761869][T29861] device vlan2 entered promiscuous mode 01:51:50 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) sendto$l2tp6(r0, &(0x7f0000000140)="83387a6efb099a0a84b2ebaf6b0e0b99f2d2839af633b117300a4ba6fc4f8cd3f949cc7bcb2d8dcd1ffe6b8a0b17dd06c916ea30363be982b2a77615e20a41bf50432642b3f58cc422be5d9ef86cf59af4f87942", 0x54, 0x24000000, &(0x7f00000001c0)={0xa, 0x0, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9, 0x4}, 0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:50 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:50 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xfeff0000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 276.767540][T29861] device gretap0 entered promiscuous mode [ 276.778798][T29861] device gretap0 left promiscuous mode 01:51:50 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:50 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) sendto$l2tp6(r0, &(0x7f0000000140)="83387a6efb099a0a84b2ebaf6b0e0b99f2d2839af633b117300a4ba6fc4f8cd3f949cc7bcb2d8dcd1ffe6b8a0b17dd06c916ea30363be982b2a77615e20a41bf50432642b3f58cc422be5d9ef86cf59af4f87942", 0x54, 0x24000000, &(0x7f00000001c0)={0xa, 0x0, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9, 0x4}, 0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) sendto$l2tp6(r0, &(0x7f0000000140)="83387a6efb099a0a84b2ebaf6b0e0b99f2d2839af633b117300a4ba6fc4f8cd3f949cc7bcb2d8dcd1ffe6b8a0b17dd06c916ea30363be982b2a77615e20a41bf50432642b3f58cc422be5d9ef86cf59af4f87942", 0x54, 0x24000000, &(0x7f00000001c0)={0xa, 0x0, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9, 0x4}, 0x20) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) [ 276.837036][T29881] device vlan2 entered promiscuous mode [ 276.842713][T29881] device gretap0 entered promiscuous mode [ 276.864176][T29881] device gretap0 left promiscuous mode 01:51:50 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 01:51:50 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:50 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x80882) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) recvmmsg(r3, &(0x7f0000000240)=[{{&(0x7f0000000140)=@alg, 0x80, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/250, 0xfa}, {&(0x7f00000006c0)=""/198, 0xc6}], 0x2, &(0x7f0000000400)=""/129, 0x81}, 0x9}], 0x1, 0x10060, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:50 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) sendto$l2tp6(r0, &(0x7f0000000140)="83387a6efb099a0a84b2ebaf6b0e0b99f2d2839af633b117300a4ba6fc4f8cd3f949cc7bcb2d8dcd1ffe6b8a0b17dd06c916ea30363be982b2a77615e20a41bf50432642b3f58cc422be5d9ef86cf59af4f87942", 0x54, 0x24000000, &(0x7f00000001c0)={0xa, 0x0, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9, 0x4}, 0x20) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:50 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xfeffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:50 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:51 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:51 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 277.628537][T29898] device vlan2 entered promiscuous mode [ 277.634099][T29898] device gretap0 entered promiscuous mode [ 277.646338][T29898] device gretap0 left promiscuous mode 01:51:51 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xff0f0000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:51 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) [ 277.722749][T29919] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 277.732113][T29919] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 277.744041][T29922] device vlan2 entered promiscuous mode [ 277.749649][T29922] device gretap0 entered promiscuous mode 01:51:51 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x2f000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:51 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 277.774717][T29922] device gretap0 left promiscuous mode [ 277.838720][T29935] device vlan2 entered promiscuous mode [ 277.844286][T29935] device gretap0 entered promiscuous mode [ 277.862157][T29935] device gretap0 left promiscuous mode 01:51:51 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 01:51:51 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000069b7000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x191) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3096}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:51 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="189300000004000000009d51f06d5a71790f037c11000080bd5695c9e6d284"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00'}, 0x10) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:51 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x3a, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:51 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xff7f0000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:51 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x262102, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8604}, {r1, 0x6100}, {}, {r5, 0x10}], 0x4, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:51 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="189300000004000000009d51f06d5a71790f037c11000080bd5695c9e6d284"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00'}, 0x10) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="189300000004000000009d51f06d5a71790f037c11000080bd5695c9e6d284"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000921f636e52b53962bb5b795fc297fed9430479e67eb7e3d5b0b7b6c2eef1b50ef2920b6ede47c893c58466f26f2fb90780e86246f8b80dc5102cff14e0e73125b13fedc617bf83efed879afb7b08f8cb3df462b3ad2f4d1b555c2e6f767456143cf033a9d144f3b6386d7e5a242f"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00'}, 0x10) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) [ 278.503991][T29943] device vlan2 entered promiscuous mode [ 278.509677][T29943] device gretap0 entered promiscuous mode [ 278.521818][T29943] device gretap0 left promiscuous mode 01:51:51 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000069b7000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x191) (async) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3096}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:51 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x262102, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8604}, {r1, 0x6100}, {}, {r5, 0x10}], 0x4, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:51 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:51 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000069b7000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x191) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3096}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000069b7000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x191) (async) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3096}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) 01:51:51 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x0, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 278.561319][T29948] validate_nla: 2 callbacks suppressed [ 278.561332][T29948] netlink: 'syz-executor.4': attribute type 58 has an invalid length. 01:51:52 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 01:51:52 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xffff0300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:52 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x4}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:52 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 01:51:52 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="af1800"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) ioctl$FITHAW(r1, 0xc0045878) 01:51:52 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="189300000004000000009d51f06d5a71790f037c11000080bd5695c9e6d284"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00'}, 0x10) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:52 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x5}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:52 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x3255c000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) [ 279.404162][T29992] device vlan2 entered promiscuous mode [ 279.409845][T29992] device gretap0 entered promiscuous mode [ 279.425942][T29992] device gretap0 left promiscuous mode 01:51:52 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x3255c000) (async, rerun: 64) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:52 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xffffa888, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 279.452073][T30004] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 01:51:52 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="af1800"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) ioctl$FITHAW(r1, 0xc0045878) 01:51:52 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x2c}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 279.531281][T30012] device vlan2 entered promiscuous mode [ 279.537011][T30012] device gretap0 entered promiscuous mode [ 279.565893][T30012] device gretap0 left promiscuous mode 01:51:53 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:51:53 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="af1800"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) ioctl$FITHAW(r1, 0xc0045878) 01:51:53 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x3}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:53 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 01:51:53 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x3255c000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x3255c000) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) 01:51:53 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xffffc785, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:53 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x5}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:53 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x5, 0x7a, 0x5, 0x78, @remote, @mcast1, 0x7800, 0x700, 0xb43c}}) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r5, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r3, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:53 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x5, 0x7a, 0x5, 0x78, @remote, @mcast1, 0x7800, 0x700, 0xb43c}}) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r5, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r3, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:53 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x7}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:53 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x5, 0x7a, 0x5, 0x78, @remote, @mcast1, 0x7800, 0x700, 0xb43c}}) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async, rerun: 64) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (rerun: 64) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) (async, rerun: 64) poll(&(0x7f0000000200)=[{r5, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r3, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (rerun: 64) [ 280.327439][T30048] device vlan2 entered promiscuous mode [ 280.333016][T30048] device gretap0 entered promiscuous mode [ 280.353808][T30048] device gretap0 left promiscuous mode 01:51:53 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:54 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:51:54 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 01:51:54 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="291089f7e1b7d595"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000300)={0x0, 0x5, 0x1f, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000005c0)={0x9, 0x2, {0xd3, @struct={0x0, 0x8}, 0x0, 0x1, 0x0, 0x182f, 0x6, 0x0, 0x20, @struct={0x2, 0x4}, 0x8, 0x7fffffff, [0x4, 0x2acd, 0x7, 0x8001, 0x302f, 0xfff]}, {0x7fff, @struct={0x2, 0xffffff80}, 0x0, 0x8, 0x8, 0x7, 0x80, 0x800, 0x0, @struct={0x2f58000, 0x1f}, 0x1, 0x80000001, [0x1, 0x7, 0x6, 0x0, 0x83, 0x10000]}, {0x6, @struct={0x8, 0x6}, 0x0, 0xf9, 0xffffffffffffffe0, 0x9, 0x6, 0x80, 0x0, @struct={0x10001, 0x1}, 0x8, 0x0, [0x1, 0x8, 0xb3f9c7b, 0x5, 0x640, 0x120000000]}, {0x7fffffff, 0x0, 0x4}}) 01:51:54 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 01:51:54 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xffffe000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:54 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 01:51:54 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:54 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="291089f7e1b7d595"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000300)={0x0, 0x5, 0x1f, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000005c0)={0x9, 0x2, {0xd3, @struct={0x0, 0x8}, 0x0, 0x1, 0x0, 0x182f, 0x6, 0x0, 0x20, @struct={0x2, 0x4}, 0x8, 0x7fffffff, [0x4, 0x2acd, 0x7, 0x8001, 0x302f, 0xfff]}, {0x7fff, @struct={0x2, 0xffffff80}, 0x0, 0x8, 0x8, 0x7, 0x80, 0x800, 0x0, @struct={0x2f58000, 0x1f}, 0x1, 0x80000001, [0x1, 0x7, 0x6, 0x0, 0x83, 0x10000]}, {0x6, @struct={0x8, 0x6}, 0x0, 0xf9, 0xffffffffffffffe0, 0x9, 0x6, 0x80, 0x0, @struct={0x10001, 0x1}, 0x8, 0x0, [0x1, 0x8, 0xb3f9c7b, 0x5, 0x640, 0x120000000]}, {0x7fffffff, 0x0, 0x4}}) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="291089f7e1b7d595"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000300)={0x0, 0x5, 0x1f, 0x1}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000005c0)={0x9, 0x2, {0xd3, @struct={0x0, 0x8}, 0x0, 0x1, 0x0, 0x182f, 0x6, 0x0, 0x20, @struct={0x2, 0x4}, 0x8, 0x7fffffff, [0x4, 0x2acd, 0x7, 0x8001, 0x302f, 0xfff]}, {0x7fff, @struct={0x2, 0xffffff80}, 0x0, 0x8, 0x8, 0x7, 0x80, 0x800, 0x0, @struct={0x2f58000, 0x1f}, 0x1, 0x80000001, [0x1, 0x7, 0x6, 0x0, 0x83, 0x10000]}, {0x6, @struct={0x8, 0x6}, 0x0, 0xf9, 0xffffffffffffffe0, 0x9, 0x6, 0x80, 0x0, @struct={0x10001, 0x1}, 0x8, 0x0, [0x1, 0x8, 0xb3f9c7b, 0x5, 0x640, 0x120000000]}, {0x7fffffff, 0x0, 0x4}}) (async) 01:51:54 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x300}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:54 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 01:51:54 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="291089f7e1b7d595"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000300)={0x0, 0x5, 0x1f, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000005c0)={0x9, 0x2, {0xd3, @struct={0x0, 0x8}, 0x0, 0x1, 0x0, 0x182f, 0x6, 0x0, 0x20, @struct={0x2, 0x4}, 0x8, 0x7fffffff, [0x4, 0x2acd, 0x7, 0x8001, 0x302f, 0xfff]}, {0x7fff, @struct={0x2, 0xffffff80}, 0x0, 0x8, 0x8, 0x7, 0x80, 0x800, 0x0, @struct={0x2f58000, 0x1f}, 0x1, 0x80000001, [0x1, 0x7, 0x6, 0x0, 0x83, 0x10000]}, {0x6, @struct={0x8, 0x6}, 0x0, 0xf9, 0xffffffffffffffe0, 0x9, 0x6, 0x80, 0x0, @struct={0x10001, 0x1}, 0x8, 0x0, [0x1, 0x8, 0xb3f9c7b, 0x5, 0x640, 0x120000000]}, {0x7fffffff, 0x0, 0x4}}) [ 281.248929][T30103] device vlan2 entered promiscuous mode [ 281.254567][T30103] device gretap0 entered promiscuous mode [ 281.273962][T30103] device gretap0 left promiscuous mode 01:51:54 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) bind$nfc_llcp(r3, &(0x7f0000000140)={0x27, 0x1, 0x1, 0x1f7299669e78da57, 0x5, 0x0, "3039b81c3beb4ddf1d793b0cfec9162aca0f9739e13280bc5c9df9fffd665658f5f22e43310f612e0cc411ea806ebbb89a10686521bd0e90e38e52a45e8978", 0x19}, 0x60) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:55 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:51:55 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:55 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 282.080972][T30154] device vlan2 entered promiscuous mode [ 282.086558][T30154] device gretap0 entered promiscuous mode [ 282.105130][T30154] device gretap0 left promiscuous mode 01:51:55 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 01:51:55 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:55 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) bind$nfc_llcp(r3, &(0x7f0000000140)={0x27, 0x1, 0x1, 0x1f7299669e78da57, 0x5, 0x0, "3039b81c3beb4ddf1d793b0cfec9162aca0f9739e13280bc5c9df9fffd665658f5f22e43310f612e0cc411ea806ebbb89a10686521bd0e90e38e52a45e8978", 0x19}, 0x60) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) bind$nfc_llcp(r3, &(0x7f0000000140)={0x27, 0x1, 0x1, 0x1f7299669e78da57, 0x5, 0x0, "3039b81c3beb4ddf1d793b0cfec9162aca0f9739e13280bc5c9df9fffd665658f5f22e43310f612e0cc411ea806ebbb89a10686521bd0e90e38e52a45e8978", 0x19}, 0x60) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) 01:51:55 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:55 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xffffff81, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 282.203400][T30162] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 282.212819][T30162] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 01:51:55 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:55 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) 01:51:55 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) bind$nfc_llcp(r3, &(0x7f0000000140)={0x27, 0x1, 0x1, 0x1f7299669e78da57, 0x5, 0x0, "3039b81c3beb4ddf1d793b0cfec9162aca0f9739e13280bc5c9df9fffd665658f5f22e43310f612e0cc411ea806ebbb89a10686521bd0e90e38e52a45e8978", 0x19}, 0x60) (async, rerun: 64) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:55 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async, rerun: 64) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) [ 282.267464][T30168] device vlan2 entered promiscuous mode [ 282.273067][T30168] device gretap0 entered promiscuous mode [ 282.296397][T30168] device gretap0 left promiscuous mode 01:51:56 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:51:56 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x5, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:56 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xffffff9e, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 282.965214][T30228] device vlan2 entered promiscuous mode [ 282.970843][T30228] device gretap0 entered promiscuous mode [ 282.978830][T30228] device gretap0 left promiscuous mode 01:51:56 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:51:56 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:56 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:56 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x6, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:56 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xffffffc3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:56 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) dup(0xffffffffffffffff) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) [ 283.140177][T30237] device vlan2 entered promiscuous mode [ 283.145762][T30237] device gretap0 entered promiscuous mode 01:51:56 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 32) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (rerun: 32) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async, rerun: 64) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async, rerun: 64) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:56 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) dup(0xffffffffffffffff) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) [ 283.186007][T30237] device gretap0 left promiscuous mode 01:51:56 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:57 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:51:57 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x7, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:57 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xffffffea, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 283.855944][T30281] device vlan2 entered promiscuous mode [ 283.861564][T30281] device gretap0 entered promiscuous mode [ 283.872448][T30281] device gretap0 left promiscuous mode 01:51:57 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:51:57 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000004edc05fd8000000ffef000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xbbe5fc3fa483503a}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf25080000002000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f6272696467650008000280040001004c000180080043000100000014000200626f6e645f736c6176655f30000000000800030000010000080003000100000008000100", @ANYRES32=r2, @ANYBLOB="1400020062016f259c038261746164765f736c6176655f3100000800"], 0x90}, 0x1, 0x0, 0x0, 0x8001}, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x7f}}, 0x0, 0x8000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:57 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/402], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:57 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x8, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:57 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xffffffef, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:57 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x9, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:57 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a4697c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d400008ed1b8a34bc75fec4d74c271c879b7c400db46f1a096ff125f3a73cf8bd7f423fd457421eefa04c080d9d76598681b563d0ccc8c0e659c357b87ebb14f8c554674b0b04188ad22902447b87083d9c78df96b9d9068d89016c2b669c2d9a4864afbbfe90b52da6005e425b63169775f955f58bb03af399ef98437b38addf65078a02bd9d47a18f54404c9060b8c7dbdc687fc87ddeb00"/402], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a4697c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d400008ed1b8a34bc75fec4d74c271c879b7c400db46f1a096ff125f3a73cf8bd7f423fd457421eefa04c080d9d76598681b563d0ccc8c0e659c357b87ebb14f8c554674b0b04188ad22902447b87083d9c78df96b9d9068d89016c2b669c2d9a4864afbbfe90b52da6005e425b63169775f955f58bb03af399ef98437b38addf65078a02bd9d47a18f54404c9060b8c7dbdc687fc87ddeb00"/402], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) 01:51:57 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000004edc05fd8000000ffef000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async, rerun: 32) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xbbe5fc3fa483503a}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf25080000002000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f6272696467650008000280040001004c000180080043000100000014000200626f6e645f736c6176655f30000000000800030000010000080003000100000008000100", @ANYRES32=r2, @ANYBLOB="1400020062016f259c038261746164765f736c6176655f3100000800"], 0x90}, 0x1, 0x0, 0x0, 0x8001}, 0x2) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x7f}}, 0x0, 0x8000, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (rerun: 64) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async, rerun: 32) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (rerun: 32) [ 284.094294][T30292] device vlan2 entered promiscuous mode [ 284.099913][T30292] device gretap0 entered promiscuous mode [ 284.114403][T30292] device gretap0 left promiscuous mode 01:51:57 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000004edc05fd8000000ffef000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xbbe5fc3fa483503a}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf25080000002000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f6272696467650008000280040001004c000180080043000100000014000200626f6e645f736c6176655f30000000000800030000010000080003000100000008000100", @ANYRES32=r2, @ANYBLOB="1400020062016f259c038261746164765f736c6176655f3100000800"], 0x90}, 0x1, 0x0, 0x0, 0x8001}, 0x2) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x7f}}, 0x0, 0x8000, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (rerun: 64) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:58 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:51:58 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0xa, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:58 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x48}, &(0x7f00000015c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x30000, 0x40, 0x10}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1fe0000) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:58 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:51:58 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xfffffff0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:58 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/402], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async, rerun: 32) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (rerun: 32) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:58 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0xb, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:58 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x48}, &(0x7f00000015c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x30000, 0x40, 0x10}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1fe0000) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:58 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:51:58 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x10, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:58 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x48}, &(0x7f00000015c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x30000, 0x40, 0x10}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1fe0000) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) [ 285.003871][T30347] device vlan2 entered promiscuous mode [ 285.009501][T30347] device gretap0 entered promiscuous mode [ 285.024492][T30347] device gretap0 left promiscuous mode 01:51:58 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000009579f84f6d31d80b2361b41414002dba09cbc2a456b7f5a2be171d491bb74edabf638edd52481b51f624c7cf56e5d721efe2a572befe777e084c8c38f4e8ca3730fecbefdbcd3e07df01dde4c18eb15cfdbbe7be51fb0ca668d29b79ce933ad0675603dfcbf055bf179d38d53b64a005a05a6ed61ea9592b72bedbf570a7304f3e9b5a5e418eb5d45e574db28e588152d9fbabfa1f5b532658a3e981e782aff6837aa8a75831436ed8dc8ead657601eae3e5b4204c30bb47647adb7782d78b36dfbca7c973567c3bb88ded4acff5d09ad8a59e4528"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14300}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) 01:51:58 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x11, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:58 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:51:58 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0xffe, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:59 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:51:59 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)}, 0x2050) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x801}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:59 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:59 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000009579f84f6d31d80b2361b41414002dba09cbc2a456b7f5a2be171d491bb74edabf638edd52481b51f624c7cf56e5d721efe2a572befe777e084c8c38f4e8ca3730fecbefdbcd3e07df01dde4c18eb15cfdbbe7be51fb0ca668d29b79ce933ad0675603dfcbf055bf179d38d53b64a005a05a6ed61ea9592b72bedbf570a7304f3e9b5a5e418eb5d45e574db28e588152d9fbabfa1f5b532658a3e981e782aff6837aa8a75831436ed8dc8ead657601eae3e5b4204c30bb47647adb7782d78b36dfbca7c973567c3bb88ded4acff5d09ad8a59e4528"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14300}, 0x0, 0xd, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async, rerun: 32) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) 01:51:59 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:59 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:51:59 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)}, 0x2050) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x801}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:59 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x0, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:59 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000009579f84f6d31d80b2361b41414002dba09cbc2a456b7f5a2be171d491bb74edabf638edd52481b51f624c7cf56e5d721efe2a572befe777e084c8c38f4e8ca3730fecbefdbcd3e07df01dde4c18eb15cfdbbe7be51fb0ca668d29b79ce933ad0675603dfcbf055bf179d38d53b64a005a05a6ed61ea9592b72bedbf570a7304f3e9b5a5e418eb5d45e574db28e588152d9fbabfa1f5b532658a3e981e782aff6837aa8a75831436ed8dc8ead657601eae3e5b4204c30bb47647adb7782d78b36dfbca7c973567c3bb88ded4acff5d09ad8a59e4528"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14300}, 0x0, 0xd, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) [ 285.909670][T30390] device vlan2 entered promiscuous mode [ 285.915246][T30390] device gretap0 entered promiscuous mode [ 285.924079][T30390] device gretap0 left promiscuous mode 01:51:59 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, &(0x7f0000000140)="be279146fd5afedf782e3cb7525b84371b672eef20f2e9a214b4fd6fed75d556a1f95fa481434c43", 0x28, 0xffff, 0x0, 0x3}]) socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:59 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x2, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:59 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)}, 0x2050) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x801}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)}, 0x2050) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x801}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) [ 286.007364][T30418] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 01:51:59 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:51:59 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:51:59 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:59 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x3, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:59 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) (async) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, &(0x7f0000000140)="be279146fd5afedf782e3cb7525b84371b672eef20f2e9a214b4fd6fed75d556a1f95fa481434c43", 0x28, 0xffff, 0x0, 0x3}]) socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:59 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000300)=@add_del={0x2, &(0x7f0000000240)='veth1_to_bond\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {r2, 0x400}, {}, {}, {r2, 0x46}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x802) 01:51:59 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x4, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:59 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) [ 286.088913][T30441] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 286.113324][T30444] device vlan2 entered promiscuous mode [ 286.118928][T30444] device gretap0 entered promiscuous mode 01:51:59 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, &(0x7f0000000140)="be279146fd5afedf782e3cb7525b84371b672eef20f2e9a214b4fd6fed75d556a1f95fa481434c43", 0x28, 0xffff, 0x0, 0x3}]) socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) (async) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, &(0x7f0000000140)="be279146fd5afedf782e3cb7525b84371b672eef20f2e9a214b4fd6fed75d556a1f95fa481434c43", 0x28, 0xffff, 0x0, 0x3}]) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) 01:51:59 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async, rerun: 32) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async, rerun: 32) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (rerun: 32) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000300)=@add_del={0x2, &(0x7f0000000240)='veth1_to_bond\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async, rerun: 64) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (rerun: 64) poll(&(0x7f0000000200)=[{r4, 0x2221}, {r2, 0x400}, {}, {}, {r2, 0x46}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x802) [ 286.142522][T30444] device gretap0 left promiscuous mode 01:51:59 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:51:59 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async, rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async, rerun: 32) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000300)=@add_del={0x2, &(0x7f0000000240)='veth1_to_bond\x00'}) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async, rerun: 32) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2221}, {r2, 0x400}, {}, {}, {r2, 0x46}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x802) 01:51:59 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x102, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:59 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x5, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:59 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:59 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:51:59 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140)={0x27, 0x1, 0x0, 0x1, 0x0, 0x5, "5a7997589b798821b3fb0ef4ac3ba48952eb6454e5a9212cee4089ebbd7b6578786264e38760b1543817c4b9199bcc2b7b4383e3ddb43a984b1d9d7c15463f", 0xd}, 0x60) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:59 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x102, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) [ 286.237591][T30454] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 286.277628][T30497] netlink: 'syz-executor.4': attribute type 1 has an invalid length. perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x102, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x3) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) 01:51:59 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x7, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 286.320416][T30501] device vlan2 entered promiscuous mode [ 286.326061][T30501] device gretap0 entered promiscuous mode 01:51:59 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140)={0x27, 0x1, 0x0, 0x1, 0x0, 0x5, "5a7997589b798821b3fb0ef4ac3ba48952eb6454e5a9212cee4089ebbd7b6578786264e38760b1543817c4b9199bcc2b7b4383e3ddb43a984b1d9d7c15463f", 0xd}, 0x60) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:59 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:51:59 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x102, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x102, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x3) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) [ 286.361158][T30501] device gretap0 left promiscuous mode 01:51:59 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:51:59 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000200000000001840e000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) poll(&(0x7f0000000200), 0x0, 0x964) 01:51:59 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async, rerun: 32) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async, rerun: 32) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async, rerun: 32) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async, rerun: 32) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140)={0x27, 0x1, 0x0, 0x1, 0x0, 0x5, "5a7997589b798821b3fb0ef4ac3ba48952eb6454e5a9212cee4089ebbd7b6578786264e38760b1543817c4b9199bcc2b7b4383e3ddb43a984b1d9d7c15463f", 0xd}, 0x60) (async, rerun: 32) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async, rerun: 32) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:51:59 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x8, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 286.443609][T30507] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 01:51:59 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:59 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x9, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:59 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:51:59 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendto$l2tp6(r0, &(0x7f00000005c0)="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", 0xfe, 0x24040800, &(0x7f0000000140)={0xa, 0x0, 0x6, @mcast1, 0x3, 0x1}, 0x20) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x2964) [ 286.483950][T30565] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 286.510554][T30567] device vlan2 entered promiscuous mode [ 286.516157][T30567] device gretap0 entered promiscuous mode [ 286.535964][T30567] device gretap0 left promiscuous mode 01:51:59 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0xa, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:51:59 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendto$l2tp6(r0, &(0x7f00000005c0)="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", 0xfe, 0x24040800, &(0x7f0000000140)={0xa, 0x0, 0x6, @mcast1, 0x3, 0x1}, 0x20) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x2964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) sendto$l2tp6(r0, &(0x7f00000005c0)="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", 0xfe, 0x24040800, &(0x7f0000000140)={0xa, 0x0, 0x6, @mcast1, 0x3, 0x1}, 0x20) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x2964) (async) [ 286.595903][T30569] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 286.635745][T30576] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 01:52:00 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:00 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:00 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0xb, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:00 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000200000000001840e000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) poll(&(0x7f0000000200), 0x0, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000200000000001840e000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (async) poll(&(0x7f0000000200), 0x0, 0x964) (async) 01:52:00 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:00 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async, rerun: 64) sendto$l2tp6(r0, &(0x7f00000005c0)="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", 0xfe, 0x24040800, &(0x7f0000000140)={0xa, 0x0, 0x6, @mcast1, 0x3, 0x1}, 0x20) (rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async, rerun: 64) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async, rerun: 64) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async, rerun: 64) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async, rerun: 64) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x2964) 01:52:00 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) [ 287.306090][T30602] device vlan2 entered promiscuous mode [ 287.311714][T30602] device gretap0 entered promiscuous mode [ 287.338645][T30602] device gretap0 left promiscuous mode 01:52:00 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:00 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3e8, 0x0, 0x0, 0x0, 0x800}, [@call={0x85, 0x0, 0x0, 0x3e}]}, &(0x7f0000000180)='GPL\x00', 0xeb, 0xc9, &(0x7f00000005c0)=""/201, 0x41100, 0xe, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xe, 0xffffffff, 0xff1f}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:00 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0xc, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:00 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x5, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 287.396935][T30600] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 01:52:00 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000200000000001840e000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async, rerun: 32) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (async) poll(&(0x7f0000000200), 0x0, 0x964) 01:52:00 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0xd, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:00 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) [ 287.442118][T30641] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 287.477852][T30643] device vlan2 entered promiscuous mode [ 287.483441][T30643] device gretap0 entered promiscuous mode 01:52:00 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendto$l2tp6(r0, &(0x7f00000005c0)="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", 0xfe, 0x24040800, &(0x7f0000000140)={0xa, 0x0, 0x6, @mcast1, 0x3, 0x1}, 0x20) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x2964) 01:52:00 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0xe, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:00 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3e8, 0x0, 0x0, 0x0, 0x800}, [@call={0x85, 0x0, 0x0, 0x3e}]}, &(0x7f0000000180)='GPL\x00', 0xeb, 0xc9, &(0x7f00000005c0)=""/201, 0x41100, 0xe, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xe, 0xffffffff, 0xff1f}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3e8, 0x0, 0x0, 0x0, 0x800}, [@call={0x85, 0x0, 0x0, 0x3e}]}, &(0x7f0000000180)='GPL\x00', 0xeb, 0xc9, &(0x7f00000005c0)=""/201, 0x41100, 0xe, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xe, 0xffffffff, 0xff1f}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) [ 287.515053][T30643] device gretap0 left promiscuous mode [ 287.549875][T30651] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 01:52:00 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3e8, 0x0, 0x0, 0x0, 0x800}, [@call={0x85, 0x0, 0x0, 0x3e}]}, &(0x7f0000000180)='GPL\x00', 0xeb, 0xc9, &(0x7f00000005c0)=""/201, 0x41100, 0xe, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xe, 0xffffffff, 0xff1f}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:00 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0xf, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:00 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x6, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 287.584369][T30658] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 01:52:00 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:00 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x10, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:00 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3e8, 0x0, 0x0, 0x0, 0x800}, [@call={0x85, 0x0, 0x0, 0x3e}]}, &(0x7f0000000180)='GPL\x00', 0xeb, 0xc9, &(0x7f00000005c0)=""/201, 0x41100, 0xe, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xe, 0xffffffff, 0xff1f}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) [ 287.638027][T30665] device vlan2 entered promiscuous mode [ 287.643615][T30665] device gretap0 entered promiscuous mode [ 287.671151][T30665] device gretap0 left promiscuous mode 01:52:01 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:01 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3e8, 0x0, 0x0, 0x0, 0x800}, [@call={0x85, 0x0, 0x0, 0x3e}]}, &(0x7f0000000180)='GPL\x00', 0xeb, 0xc9, &(0x7f00000005c0)=""/201, 0x41100, 0xe, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xe, 0xffffffff, 0xff1f}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:01 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x11, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:01 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3e8, 0x0, 0x0, 0x0, 0x800}, [@call={0x85, 0x0, 0x0, 0x3e}]}, &(0x7f0000000180)='GPL\x00', 0xeb, 0xc9, &(0x7f00000005c0)=""/201, 0x41100, 0xe, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xe, 0xffffffff, 0xff1f}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:01 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x7, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:01 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140)={0x27, 0x4, 0x0, 0x3, 0xbe, 0x40, "1272d479942cee2b867fe68f0c7b66ad1041005f78a0d7832a46251b9e607999d244fcd426c16a0e3d25ff791af239395378888bfc79f109f8b6600ad6a06a", 0x1c}, 0x60) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:01 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(r1, &(0x7f0000000140)={[0x2]}, 0x8) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:01 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x12, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:01 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f254215ca6703b4850a133566300f11b45b590a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5"], 0x191) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) (async) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140)={0x27, 0x4, 0x0, 0x3, 0xbe, 0x40, "1272d479942cee2b867fe68f0c7b66ad1041005f78a0d7832a46251b9e607999d244fcd426c16a0e3d25ff791af239395378888bfc79f109f8b6600ad6a06a", 0x1c}, 0x60) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:01 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140)={0x27, 0x4, 0x0, 0x3, 0xbe, 0x40, "1272d479942cee2b867fe68f0c7b66ad1041005f78a0d7832a46251b9e607999d244fcd426c16a0e3d25ff791af239395378888bfc79f109f8b6600ad6a06a", 0x1c}, 0x60) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) (async) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140)={0x27, 0x4, 0x0, 0x3, 0xbe, 0x40, "1272d479942cee2b867fe68f0c7b66ad1041005f78a0d7832a46251b9e607999d244fcd426c16a0e3d25ff791af239395378888bfc79f109f8b6600ad6a06a", 0x1c}, 0x60) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) 01:52:01 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(r1, &(0x7f0000000140)={[0x2]}, 0x8) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) [ 288.320352][T30697] device vlan2 entered promiscuous mode [ 288.325909][T30697] device gretap0 entered promiscuous mode [ 288.356605][T30697] device gretap0 left promiscuous mode 01:52:01 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:01 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x1c, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:01 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:01 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(r1, &(0x7f0000000140)={[0x2]}, 0x8) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) signalfd(r1, &(0x7f0000000140)={[0x2]}, 0x8) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) 01:52:01 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x3, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:01 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 01:52:01 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x8, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:01 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async, rerun: 32) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async, rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) (async) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 01:52:01 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x5, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:01 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) (async) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 01:52:01 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) [ 288.503848][T30764] device vlan2 entered promiscuous mode [ 288.509451][T30764] device gretap0 entered promiscuous mode [ 288.536993][T30764] device gretap0 left promiscuous mode 01:52:01 executing program 5: ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x54}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x287}], 0x7, 0x964) 01:52:01 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:01 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x7, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:01 executing program 5: ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async, rerun: 32) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x54}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x287}], 0x7, 0x964) 01:52:01 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x9, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:01 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x8, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:01 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x48}, &(0x7f00000015c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r3, &(0x7f0000000140), r3}, 0x8000000) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:02 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x48}, &(0x7f00000015c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r3, &(0x7f0000000140), r3}, 0x8000000) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) [ 288.653623][T30817] device vlan2 entered promiscuous mode [ 288.659256][T30817] device gretap0 entered promiscuous mode [ 288.669969][T30817] device gretap0 left promiscuous mode 01:52:02 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0xb, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:02 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:02 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x300, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:02 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x48}, &(0x7f00000015c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r3, &(0x7f0000000140), r3}, 0x8000000) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x48}, &(0x7f00000015c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r3, &(0x7f0000000140), r3}, 0x8000000) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) 01:52:02 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:02 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0xa, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:02 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 288.788398][T30840] device vlan2 entered promiscuous mode [ 288.794016][T30840] device gretap0 entered promiscuous mode [ 288.801990][T30840] device gretap0 left promiscuous mode 01:52:02 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x19, 0xff, 0x80, 0xe7, 0x0, 0xfcba, 0x20092, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8, 0x23, 0x3, 0x3, 0x10000, 0x0, 0xd07d, 0x0, 0x7, 0x0, 0x7ff}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:02 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0xb, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:02 executing program 5: ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (rerun: 64) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async, rerun: 32) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x54}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x287}], 0x7, 0x964) 01:52:02 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:02 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:02 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:02 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:02 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async, rerun: 64) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async, rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1306f014d336b04b030400000000000092290a7e45693173cf00ef4349e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x19, 0xff, 0x80, 0xe7, 0x0, 0xfcba, 0x20092, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8, 0x23, 0x3, 0x3, 0x10000, 0x0, 0xd07d, 0x0, 0x7, 0x0, 0x7ff}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0xb) (async, rerun: 32) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async, rerun: 64) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (rerun: 64) [ 289.490594][T30873] device vlan2 entered promiscuous mode [ 289.496181][T30873] device gretap0 entered promiscuous mode [ 289.528900][T30873] device gretap0 left promiscuous mode 01:52:02 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e73185a7ac1bfe2a085e27682615efe0f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bca9eeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211becf75ef0867cf21d7b5af988db4a6841a9091550e861de41198dcee3ad4b8c127faaa99017e73e198aabfcdf88c7cb96e8c156416cfc1b23c88af0e34496a0ca4dce3eb1862a942c59f08cd8e4ba8a46a68ecf6fcf4ab7d23045e2432c6bb2c9f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) connect$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x20) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:02 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x7}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:02 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0xc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:02 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:02 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async, rerun: 32) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async, rerun: 64) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x19, 0xff, 0x80, 0xe7, 0x0, 0xfcba, 0x20092, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8, 0x23, 0x3, 0x3, 0x10000, 0x0, 0xd07d, 0x0, 0x7, 0x0, 0x7ff}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0xb) (async, rerun: 32) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:02 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:03 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:03 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='westwood\x00', 0x9) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:03 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e73185a7ac1bfe2a085e27682615efe0f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bca9eeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211becf75ef0867cf21d7b5af988db4a6841a9091550e861de41198dcee3ad4b8c127faaa99017e73e198aabfcdf88c7cb96e8c156416cfc1b23c88af0e34496a0ca4dce3eb1862a942c59f08cd8e4ba8a46a68ecf6fcf4ab7d23045e2432c6bb2c9f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) connect$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x20) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) connect$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x20) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) 01:52:03 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x9}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:03 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) connect$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x20) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) connect$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x20) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r1}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) [ 289.665164][T30897] device vlan2 entered promiscuous mode [ 289.670940][T30897] device gretap0 entered promiscuous mode [ 289.693357][T30897] device gretap0 left promiscuous mode 01:52:03 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='westwood\x00', 0x9) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:03 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:03 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xa}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:03 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0xd, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:03 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:03 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xb}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:03 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='westwood\x00', 0x9) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (rerun: 32) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async, rerun: 64) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (rerun: 64) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async, rerun: 64) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (rerun: 64) 01:52:03 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:03 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x10}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 289.855886][T30956] device vlan2 entered promiscuous mode [ 289.861583][T30956] device gretap0 entered promiscuous mode [ 289.869043][T30956] device gretap0 left promiscuous mode 01:52:03 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:03 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x1ffffffffffffda0, &(0x7f0000000140)=ANY=[@ANYBLOB="6b2a01aac952fc80889a03915d19e3ffffff000000d800bf260d812de5483cc823caf05996fd1445bd20eaeafc298bc2553b93265f0f70b663debd81c03733681fb6b120fbcf3cce63bf3c5331eadf69314b65ecca470325b6c4d972c11a91360656d416dbc57bdb63190598eb7d734cd97ca3b50c1ce880035e530ec98cc1178e3451f2a3e13342f3cfb353c497f44a94bc3cb601c32ef4afbdb58171e2a2de480ae4594fa56186b284d0b811"], &(0x7f0000000240)='syzkaller\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f000001d000)={0x6, 0x80, 0x0, 0x80, 0x0, 0xff, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x5aa1}, r2, 0xffffffffffffffff, r1, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0xf178, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r6, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r4, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:03 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x11}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:03 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0xe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:03 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:03 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:03 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x1ffffffffffffda0, &(0x7f0000000140)=ANY=[@ANYBLOB="6b2a01aac952fc80889a03915d19e3ffffff000000d800bf260d812de5483cc823caf05996fd1445bd20eaeafc298bc2553b93265f0f70b663debd81c03733681fb6b120fbcf3cce63bf3c5331eadf69314b65ecca470325b6c4d972c11a91360656d416dbc57bdb63190598eb7d734cd97ca3b50c1ce880035e530ec98cc1178e3451f2a3e13342f3cfb353c497f44a94bc3cb601c32ef4afbdb58171e2a2de480ae4594fa56186b284d0b811"], &(0x7f0000000240)='syzkaller\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f000001d000)={0x6, 0x80, 0x0, 0x80, 0x0, 0xff, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x5aa1}, r2, 0xffffffffffffffff, r1, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763cffff50c928f9e04681cfdd05cada3f03850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253cf93861dbcbdeeef274aa294b9999e95c8c8ec26090000007aae34f30d6ab83ccccc98c7f4b6211bec127faac0b700003e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d4000077dd908f862d0d1a0c94d7eebacae01506f061bb"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0xf178, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r6, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r4, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x1ffffffffffffda0, &(0x7f0000000140)=ANY=[@ANYBLOB="6b2a01aac952fc80889a03915d19e3ffffff000000d800bf260d812de5483cc823caf05996fd1445bd20eaeafc298bc2553b93265f0f70b663debd81c03733681fb6b120fbcf3cce63bf3c5331eadf69314b65ecca470325b6c4d972c11a91360656d416dbc57bdb63190598eb7d734cd97ca3b50c1ce880035e530ec98cc1178e3451f2a3e13342f3cfb353c497f44a94bc3cb601c32ef4afbdb58171e2a2de480ae4594fa56186b284d0b811"], &(0x7f0000000240)='syzkaller\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) getpid() (async) perf_event_open(&(0x7f000001d000)={0x6, 0x80, 0x0, 0x80, 0x0, 0xff, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x5aa1}, r2, 0xffffffffffffffff, r1, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0xf178, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r6, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r4, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) 01:52:03 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) [ 289.992070][T30991] device vlan2 entered promiscuous mode [ 289.997719][T30991] device gretap0 entered promiscuous mode [ 290.025492][T30991] device gretap0 left promiscuous mode 01:52:03 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:03 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) sendto$l2tp6(r3, &(0x7f0000000140), 0x0, 0x4011, &(0x7f0000000180)={0xa, 0x0, 0x401, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x20) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:03 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0x4, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:03 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x1ffffffffffffda0, &(0x7f0000000140)=ANY=[@ANYBLOB="6b2a01aac952fc80889a03915d19e3ffffff000000d800bf260d812de5483cc823caf05996fd1445bd20eaeafc298bc2553b93265f0f70b663debd81c03733681fb6b120fbcf3cce63bf3c5331eadf69314b65ecca470325b6c4d972c11a91360656d416dbc57bdb63190598eb7d734cd97ca3b50c1ce880035e530ec98cc1178e3451f2a3e13342f3cfb353c497f44a94bc3cb601c32ef4afbdb58171e2a2de480ae4594fa56186b284d0b811"], &(0x7f0000000240)='syzkaller\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = getpid() r3 = perf_event_open(&(0x7f000001d000)={0x6, 0x80, 0x0, 0x80, 0x0, 0xff, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x5aa1}, r2, 0xffffffffffffffff, r1, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0xf178, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r6, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r4, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:03 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0xf, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:03 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0x14, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:03 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:03 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) [ 290.159619][T31023] device vlan2 entered promiscuous mode [ 290.165217][T31023] device gretap0 entered promiscuous mode [ 290.191211][T31023] device gretap0 left promiscuous mode 01:52:03 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) sendto$l2tp6(r3, &(0x7f0000000140), 0x0, 0x4011, &(0x7f0000000180)={0xa, 0x0, 0x401, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x20) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:03 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:03 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0x29, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:03 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:03 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) sendto$l2tp6(r3, &(0x7f0000000140), 0x0, 0x4011, &(0x7f0000000180)={0xa, 0x0, 0x401, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x20) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:03 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:03 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x10, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 290.283625][T31039] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 01:52:03 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x5, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:03 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) [ 290.363856][T31051] device vlan2 entered promiscuous mode [ 290.369496][T31051] device gretap0 entered promiscuous mode [ 290.378597][T31051] device gretap0 left promiscuous mode 01:52:03 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:03 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x6, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 290.869126][T31054] ================================================================== [ 290.877243][T31054] BUG: KCSAN: data-race in __filemap_add_folio / iomap_dio_complete [ 290.885241][T31054] [ 290.887555][T31054] write to 0xffff8881354ab500 of 8 bytes by task 31041 on cpu 1: [ 290.895267][T31054] __filemap_add_folio+0x256/0x4d0 [ 290.900369][T31054] filemap_add_folio+0x6b/0x150 [ 290.905237][T31054] page_cache_ra_unbounded+0x274/0x400 [ 290.910703][T31054] ondemand_readahead+0x4f8/0x700 [ 290.915732][T31054] page_cache_sync_ra+0xaf/0xe0 [ 290.920592][T31054] filemap_read+0x3ed/0x1430 [ 290.925189][T31054] generic_file_read_iter+0x72/0x320 [ 290.930460][T31054] generic_file_splice_read+0x24f/0x330 [ 290.935991][T31054] splice_direct_to_actor+0x2aa/0x650 [ 290.941366][T31054] do_splice_direct+0x106/0x190 [ 290.946214][T31054] do_sendfile+0x675/0xc40 [ 290.950634][T31054] __x64_sys_sendfile64+0x102/0x140 [ 290.955838][T31054] do_syscall_64+0x44/0xd0 [ 290.960257][T31054] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 290.966158][T31054] [ 290.968481][T31054] read to 0xffff8881354ab500 of 8 bytes by task 31054 on cpu 0: [ 290.976090][T31054] iomap_dio_complete+0x32e/0x3e0 [ 290.981109][T31054] iomap_dio_rw+0x56/0x80 [ 290.985452][T31054] ext4_file_write_iter+0x7d5/0xda0 [ 290.990657][T31054] do_iter_readv_writev+0x2de/0x380 [ 290.995854][T31054] do_iter_write+0x192/0x5c0 [ 291.000430][T31054] vfs_iter_write+0x4c/0x70 [ 291.004939][T31054] iter_file_splice_write+0x43a/0x790 [ 291.010320][T31054] direct_splice_actor+0x80/0xa0 [ 291.015253][T31054] splice_direct_to_actor+0x345/0x650 [ 291.020638][T31054] do_splice_direct+0x106/0x190 [ 291.025496][T31054] do_sendfile+0x675/0xc40 [ 291.029912][T31054] __x64_sys_sendfile64+0x102/0x140 [ 291.035117][T31054] do_syscall_64+0x44/0xd0 [ 291.039535][T31054] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 291.045439][T31054] [ 291.047765][T31054] value changed: 0x0000000000000312 -> 0x0000000000000314 [ 291.054868][T31054] [ 291.057186][T31054] Reported by Kernel Concurrency Sanitizer on: 01:52:04 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:04 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) [ 291.063330][T31054] CPU: 0 PID: 31054 Comm: syz-executor.3 Not tainted 5.17.0-rc1-syzkaller #0 [ 291.072095][T31054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.082153][T31054] ================================================================== 01:52:04 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x7, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:04 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x11, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 291.139346][T31064] device vlan2 entered promiscuous mode [ 291.144953][T31064] device gretap0 entered promiscuous mode [ 291.153289][T31064] device gretap0 left promiscuous mode 01:52:04 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:04 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async, rerun: 64) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (rerun: 32) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (rerun: 64) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:04 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:04 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x8, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:04 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x12, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:04 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:04 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x9, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:04 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:04 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0xa, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:04 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) [ 291.297436][T31082] device vlan2 entered promiscuous mode [ 291.303037][T31082] device gretap0 entered promiscuous mode [ 291.317795][T31082] device gretap0 left promiscuous mode 01:52:04 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0xb, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:04 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:04 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x10, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:04 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x11, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:04 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:04 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0xffe, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:04 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x22, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 291.500043][T31115] device vlan2 entered promiscuous mode [ 291.505630][T31115] device gretap0 entered promiscuous mode [ 291.530791][T31115] device gretap0 left promiscuous mode 01:52:05 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:05 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x2, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:05 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:05 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:05 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x25, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:05 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:05 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x3, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 292.209895][T31118] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 292.248705][T31122] device vlan2 entered promiscuous mode [ 292.254290][T31122] device gretap0 entered promiscuous mode [ 292.289456][T31122] device gretap0 left promiscuous mode 01:52:05 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:05 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x2f, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:05 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x4, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 292.369156][T31133] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:52:05 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9"], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) [ 292.439781][T31141] device vlan2 entered promiscuous mode [ 292.445364][T31141] device gretap0 entered promiscuous mode 01:52:05 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) [ 292.521437][T31141] device gretap0 left promiscuous mode [ 292.600922][T31143] validate_nla: 6 callbacks suppressed [ 292.600936][T31143] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 01:52:06 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:06 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES16=r1], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1011c0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:06 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x3a, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:06 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x5, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:06 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:06 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:06 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async, rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async, rerun: 32) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async, rerun: 32) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES16=r1], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1011c0, 0x0) (async) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) [ 293.141897][T31170] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 293.153659][T31167] device vlan2 entered promiscuous mode [ 293.159258][T31167] device gretap0 entered promiscuous mode 01:52:06 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x7, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 293.182979][T31167] device gretap0 left promiscuous mode 01:52:06 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES16=r1], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1011c0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES16=r1], 0x191) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1011c0, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r2, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) (async) 01:52:06 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:06 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x8, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:06 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x48, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 293.258802][T31185] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 01:52:06 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) bind$nfc_llcp(r3, &(0x7f0000000140)={0x27, 0x1, 0x1, 0x1f7299669e78da57, 0x5, 0x0, "3039b81c3beb4ddf1d793b0cfec9162aca0f9739e13280bc5c9df9fffd665658f5f22e43310f612e0cc411ea806ebbb89a10686521bd0e90e38e52a45e8978", 0x19}, 0x60) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:06 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:06 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='\\$+\'\x00', &(0x7f0000000180)='\x00', 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="b08f6756d3154da0406800"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x8001}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x6, 0x964) 01:52:06 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x9, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:06 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) (async, rerun: 64) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='\\$+\'\x00', &(0x7f0000000180)='\x00', 0x0) (rerun: 64) socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="b08f6756d3154da0406800"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async, rerun: 32) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x8001}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x6, 0x964) [ 293.319760][T31201] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 293.340951][T31203] device vlan2 entered promiscuous mode [ 293.346546][T31203] device gretap0 entered promiscuous mode [ 293.363894][T31203] device gretap0 left promiscuous mode 01:52:06 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:06 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='\\$+\'\x00', &(0x7f0000000180)='\x00', 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="b08f6756d3154da0406800"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async, rerun: 32) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x191) (rerun: 32) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) (async, rerun: 64) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (rerun: 64) poll(&(0x7f0000000200)=[{r3, 0x8001}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x6, 0x964) 01:52:06 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:06 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0xa, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 293.444665][T31211] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:52:06 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x4a, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:06 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 01:52:06 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:06 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 01:52:06 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0xb, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 293.517962][T31227] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 293.535735][T31231] device vlan2 entered promiscuous mode [ 293.541413][T31231] device gretap0 entered promiscuous mode 01:52:06 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0xc, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 293.567734][T31231] device gretap0 left promiscuous mode [ 293.583286][T31237] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:52:06 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:07 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x4c, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 293.627773][T31240] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:52:07 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0xd, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 293.734879][T31249] device vlan2 entered promiscuous mode [ 293.740533][T31249] device gretap0 entered promiscuous mode [ 293.773688][T31249] device gretap0 left promiscuous mode 01:52:07 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0xe, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 293.817392][T31251] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 293.869421][T31255] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:52:07 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1c, 0x22, 0x7e2881d4b0058261, 0x0, 0x0, {0x9}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="c8cc664d"}]}, 0x1c}}, 0x0) r3 = dup(0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00'}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xb) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1c, 0x22, 0x7e2881d4b0058261, 0x0, 0x0, {0x9}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="c8cc664d"}]}, 0x1c}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000080)={0x3, 'veth1_to_batadv\x00', {0xa4}, 0x1f}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000b9b76ca5d908aa20d3e3ce6e9300300012028006000500000000000c0002000e00003c9ba7be000a0000000600050088a80000080005008fc35f22a39b230b8a5d370ffdc683fb53d68c76d0e931f4c56de73878e5b648f30e7c96639af4abeaf5f03765611ad0647fa1a469b62de705a71b52ee093c87da681f078e7151c6ca", @ANYRES32=r4, @ANYRES64=r5, @ANYRES32=r4, @ANYBLOB="048ffc01ca45db7c00b42cba8a8dfcc2a72a8b2e931da1772f677dca8b9d0ef4990ccadd1241a97aea847ab65e40f50b5c1b71e6443d2b71c7e020b1935a7af623a7f73315c7b4f21746260f66accab5f67763376c498eb0c22205d4c8fffeca034f80d343f82640c20cb25c2f5285ea893a54abd455b69ca20698ed7a82ee040efd386cc62e3226d2d10d047dd87918f6b4eb9a0894cb0b2ae704830f959f6c6a8607094ef48fe42ba79ff8f0fd4842a7ef60513111837852044676d73165a3fbff5269"], 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:07 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x60, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:07 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) [ 294.406624][T31258] device vlan2 entered promiscuous mode [ 294.412266][T31258] device gretap0 entered promiscuous mode [ 294.420069][T31258] device gretap0 left promiscuous mode 01:52:07 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x88095, 0x0, 0x0, 0x2, 0x0, 0x453b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000}, [@exit, @ldst={0x1, 0x2, 0x3, 0x2, 0x4, 0x106, 0xffffffffffffffff}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xa}, @map_fd={0x18, 0x4}, @generic={0x9, 0x6, 0xe, 0x3, 0xfffffff0}]}, &(0x7f0000000240)='GPL\x00', 0x1ff, 0x1000, &(0x7f0000000e00)=""/4096, 0x40f00, 0x2, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x3, 0x6, 0x1}, 0x10}, 0x80) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x101440, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) dup2(r2, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 01:52:07 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0xf, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) [ 294.466857][T31261] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 01:52:07 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000088f04d3d320fd5fcfcb499581ad8623e16b1059718d2dd8ca0183b5e95424517d8cd44827bccb377bdaafdba78fdbbef5fc59976b1cfd8c5bf2f3b733de6d4b10327f06322390c2d4f677c3503b20cd1bb576d91ceda353a84e4a96a9e1c68c7808381d728782ee08e53bc936b43296e2d4be727b1504208f72bf08dbcd9f257e04805139fa0fa4dafdd15923aa155f2bbdf8dfa89122f9307d22e3576f400deb887d973cd90819ae0774f95688d29d7a3612451b9eb82c3049479e1cdde8dd884d"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r3, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:07 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1c, 0x22, 0x7e2881d4b0058261, 0x0, 0x0, {0x9}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="c8cc664d"}]}, 0x1c}}, 0x0) r3 = dup(0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00'}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xb) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1c, 0x22, 0x7e2881d4b0058261, 0x0, 0x0, {0x9}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="c8cc664d"}]}, 0x1c}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000080)={0x3, 'veth1_to_batadv\x00', {0xa4}, 0x1f}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000b9b76ca5d908aa20d3e3ce6e9300300012028006000500000000000c0002000e00003c9ba7be000a0000000600050088a80000080005008fc35f22a39b230b8a5d370ffdc683fb53d68c76d0e931f4c56de73878e5b648f30e7c96639af4abeaf5f03765611ad0647fa1a469b62de705a71b52ee093c87da681f078e7151c6ca", @ANYRES32=r4, @ANYRES64=r5, @ANYRES32=r4, @ANYBLOB="048ffc01ca45db7c00b42cba8a8dfcc2a72a8b2e931da1772f677dca8b9d0ef4990ccadd1241a97aea847ab65e40f50b5c1b71e6443d2b71c7e020b1935a7af623a7f73315c7b4f21746260f66accab5f67763376c498eb0c22205d4c8fffeca034f80d343f82640c20cb25c2f5285ea893a54abd455b69ca20698ed7a82ee040efd386cc62e3226d2d10d047dd87918f6b4eb9a0894cb0b2ae704830f959f6c6a8607094ef48fe42ba79ff8f0fd4842a7ef60513111837852044676d73165a3fbff5269"], 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:07 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x403, 0x0, 0x68, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:07 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 01:52:07 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x10, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:07 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x88095, 0x0, 0x0, 0x2, 0x0, 0x453b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000}, [@exit, @ldst={0x1, 0x2, 0x3, 0x2, 0x4, 0x106, 0xffffffffffffffff}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xa}, @map_fd={0x18, 0x4}, @generic={0x9, 0x6, 0xe, 0x3, 0xfffffff0}]}, &(0x7f0000000240)='GPL\x00', 0x1ff, 0x1000, &(0x7f0000000e00)=""/4096, 0x40f00, 0x2, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x3, 0x6, 0x1}, 0x10}, 0x80) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x101440, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) dup2(r2, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) [ 294.532675][T31263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 294.571760][T31270] device vlan2 entered promiscuous mode [ 294.577384][T31270] device gretap0 entered promiscuous mode 01:52:07 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1ff}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x88095, 0x0, 0x0, 0x2, 0x0, 0x453b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000}, [@exit, @ldst={0x1, 0x2, 0x3, 0x2, 0x4, 0x106, 0xffffffffffffffff}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xa}, @map_fd={0x18, 0x4}, @generic={0x9, 0x6, 0xe, 0x3, 0xfffffff0}]}, &(0x7f0000000240)='GPL\x00', 0x1ff, 0x1000, &(0x7f0000000e00)=""/4096, 0x40f00, 0x2, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x3, 0x6, 0x1}, 0x10}, 0x80) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x101440, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) dup2(r2, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 01:52:07 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) [ 294.596000][T31270] device gretap0 left promiscuous mode 01:52:07 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1c, 0x22, 0x7e2881d4b0058261, 0x0, 0x0, {0x9}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="c8cc664d"}]}, 0x1c}}, 0x0) r3 = dup(0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00'}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xb) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1c, 0x22, 0x7e2881d4b0058261, 0x0, 0x0, {0x9}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="c8cc664d"}]}, 0x1c}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000080)={0x3, 'veth1_to_batadv\x00', {0xa4}, 0x1f}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000b9b76ca5d908aa20d3e3ce6e9300300012028006000500000000000c0002000e00003c9ba7be000a0000000600050088a80000080005008fc35f22a39b230b8a5d370ffdc683fb53d68c76d0e931f4c56de73878e5b648f30e7c96639af4abeaf5f03765611ad0647fa1a469b62de705a71b52ee093c87da681f078e7151c6ca", @ANYRES32=r4, @ANYRES64=r5, @ANYRES32=r4, @ANYBLOB="048ffc01ca45db7c00b42cba8a8dfcc2a72a8b2e931da1772f677dca8b9d0ef4990ccadd1241a97aea847ab65e40f50b5c1b71e6443d2b71c7e020b1935a7af623a7f73315c7b4f21746260f66accab5f67763376c498eb0c22205d4c8fffeca034f80d343f82640c20cb25c2f5285ea893a54abd455b69ca20698ed7a82ee040efd386cc62e3226d2d10d047dd87918f6b4eb9a0894cb0b2ae704830f959f6c6a8607094ef48fe42ba79ff8f0fd4842a7ef60513111837852044676d73165a3fbff5269"], 0x60}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:08 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c6520205b931dd094c1aa5443d95d1312f014d336b04b030400000000000092290a7e4555a763c1bfe2a085e2760f83c398aef936e1318eed5a4211763c064750c928f9e04681cfdd05cada3f03b4850a133566300f11b45b594a3ccce73bfa1b8b859ff73ac845e77253df938615bcbdeeef274aa294b9999e95c8c8ec26b78932d57aae34f30d6ab83ccccc98c7f4b6211bec127faaa99017e73e198aabfcdf08c7cb96e8c156416cfc1b23c88af0e34496a0ca4d71227b362a942c59f08cd8e4ba8a46a6f6340a85d96c168e5f1201fe3f97c1bd3b8f845813c55433ae2bd2fd65a6e3f887799600000000f5e95b8437a9d40000"], 0x191) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x7f, 0x2, 0xb, 0x0, 0xfffffffffffff7fd, 0x210, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x4faacfa7}, 0xa20, 0x3f, 0x7, 0x5, 0x8, 0xffffff00, 0x4, 0x0, 0x7}, 0x0, 0x6, r2, 0x2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:08 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x11, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 01:52:08 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x80, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40080, 0xa9, 0x8, 0x0, 0x0, 0x8, 0x7, 0x0, @perf_config_ext={0x100, 0x800}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x41) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x7f, 0x2, 0xb, 0x0, 0xfffffffffffff7fd, 0x210, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x4faacfa7}, 0xa20, 0x3f, 0x7, 0x5, 0x8, 0xffffff00, 0x4, 0x0, 0x7}, 0x0, 0x6, r2, 0x2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x2221}, {0xffffffffffffffff, 0x400}, {}, {r0}, {r1, 0x44}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x82}], 0x7, 0x964) 01:52:08 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)="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