) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0xe) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r2, 0x13}}, 0x10) 20:02:42 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000000140000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1785.799352] xt_l2tp: v2 tid > 0xffff: 131072 [ 1785.833950] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1785.846936] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1785.880082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1785.900964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 20:02:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, 0x0, 0x48001) accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x41) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000000500)=""/221) r5 = dup(r2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000004c0)={0x3, 0x0, &(0x7f00000002c0)=""/228, &(0x7f00000003c0)=""/127, &(0x7f0000000440)=""/70}) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000f108000104070000036bbb51c7238ea7224abc4fda340000040000914f6e637416bb2eeb6c80fa2ae25784d56e"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4044050) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$EVIOCGPROP(r7, 0x80404509, &(0x7f0000000640)) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 20:02:42 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000000180000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:02:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:02:42 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x4c}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:02:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$alg(r1, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000200)=0x3, 0x4) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@dev, @mcast1, @rand_addr="657261c70996f4e1596272e2ec4688fa", 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c204c6, r5}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000440)={@remote, @rand_addr="68d4b41238c2d4e5ea6c98bd38e42eb2", @loopback, 0x0, 0x20, 0xff, 0x100, 0x0, 0xfa6bd12bfffd48c2, r5}) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(r6, 0x0, 0x48001) accept4$alg(r6, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x41) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @none, 0x9}, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000000180)=""/98) 20:02:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x30}, 0x30) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x101101, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000240)={0x32, 0x6, 0x0, {0x4, 0x2, 0x9, 0x0, '/dev/kvm\x00'}}, 0x32) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x80000001, 0x80080) ioctl$RTC_PLL_SET(r5, 0x40207012, &(0x7f00000001c0)={0x1ff, 0x2, 0x5, 0xfff, 0x5, 0x2, 0x7fff}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) [ 1786.150097] xt_l2tp: v2 tid > 0xffff: 131072 [ 1786.179064] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1786.247269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1786.293555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 20:02:42 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x40000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:02:42 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f7680000000000000000000000000000001a0000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:02:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCNOTTY(r0, 0x5422) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0xa0442, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x4080}, 0x80) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x6, 0x842a, 0x0, 0x5, 0x4}}) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$alg(r4, 0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000000c0)={@dev, @mcast1, @rand_addr="657261c70996f4e1596272e2ec4688fa", 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c204c6, r8}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000440)={@remote, @rand_addr="68d4b41238c2d4e5ea6c98bd38e42eb2", @loopback, 0x0, 0x20, 0xff, 0x100, 0x0, 0xfa6bd12bfffd48c2, r8}) accept(r3, &(0x7f0000000140)=@caif=@dbg, &(0x7f0000000400)=0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000340)={r9, 0x0, 0xffff, 0x0, 0xff, 0x1000, 0x3ff, 0xfff, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x6, 0xfffd, 0xffff7738, 0x5}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r9, 0x101}, 0x8) 20:02:42 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x60}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:02:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:02:42 executing program 2: ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) [ 1786.511719] xt_l2tp: v2 tid > 0xffff: 131072 20:02:43 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, 0x0, 0x48001) accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x41) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000001240)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000001280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000340)={r4, 0x0, 0xffff, 0x0, 0xff, 0x1000, 0x3ff, 0xfff, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x6, 0xfffd, 0xffff7738, 0x5}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={r4, 0x4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000200)={r5, 0x200, 0x1000, "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"}, 0x1008) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, &(0x7f00000012c0)=""/149, &(0x7f0000001380)=0x95) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000000)={0x3, {0x2, 0x0, 0xb8, 0xfffc, 0x401}}) 20:02:43 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f7680000000000000000000000000000001d0000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:02:43 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x68}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:02:43 executing program 2: socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) [ 1786.770848] xt_l2tp: v2 tid > 0xffff: 131072 20:02:43 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000000230000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:02:43 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x400}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x3}) [ 1789.213782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.221319] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.699209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1793.059067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 20:02:53 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x48000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:02:53 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x6c}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:02:53 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x101000, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0xfffffffffffffffb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x9, 0x3f}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000100)={&(0x7f00000000c0)=[0x4, 0x7], 0x2, 0x8000, 0x6, 0x95, 0x7fff, 0x53d, 0x8, {0x81, 0x4, 0x4, 0xf000, 0x8a3, 0x5, 0xfff, 0xffff, 0xfff7, 0x7, 0x54, 0x7, 0x3, 0x5, "8526c8aaa54011eb7d52a72bab647abbc206c2d369985d4dfbb23013841f9748"}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0xffff}}) 20:02:53 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000000260000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:02:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) 20:02:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1796.696924] xt_l2tp: v2 tid > 0xffff: 131072 20:02:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x391081, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000280)={@remote}, 0x14) 20:02:53 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x74}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:02:53 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f7680000000000000000000000000000002f0000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:02:53 executing program 0: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, 0x0, 0x48001) accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x41) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={r2, 0x0, 0xffff, 0x0, 0xff, 0x1000, 0x5, 0xfff, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x6, 0xffff, 0xffff7738, 0x1000005}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={r2, 0x0, 0x200}, 0x8) [ 1796.879321] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1796.901510] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1796.907299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1796.962211] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1796.968842] 8021q: adding VLAN 0 to HW filter on device team0 [ 1796.981670] xt_l2tp: v2 tid > 0xffff: 131072 20:02:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x5b4f) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x2, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$TCFLSH(r2, 0x540b, 0x1) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/139, 0x8b}, {&(0x7f0000000000)=""/17, 0x11}, {&(0x7f0000000140)=""/89, 0x59}], 0x3) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000200)={0x0, 0x5, 0x3ff, 0xf0c, 0x1a, "4784430b96c9188b"}) [ 1797.019539] A link change request failed with some changes committed already. Interface K may have been left with an inconsistent configuration, please check. 20:02:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$alg(r1, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000180)={0xb77f, 0x731a681a, 0xd0, 0x0, 0x0, @stepwise={{0x3}, {0x4, 0xfffffedd}, {0xcde0, 0x7f}}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@dev, @mcast1, @rand_addr="657261c70996f4e1596272e2ec4688fa", 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c204c6, r5}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000440)={@remote, @rand_addr="68d4b41238c2d4e5ea6c98bd38e42eb2", @loopback, 0x0, 0x20, 0xff, 0x100, 0x0, 0xfa6bd12bfffd48c2, r5}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={@dev, @mcast1, @rand_addr="657261c70996f4e1596272e2ec4688fa", 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c204c6, r9}) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r10, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) openat(r10, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1c6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6, @in6=@ipv4={[], [], @dev}}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000000080)=0xffffffffffffff4e) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) 20:02:56 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x4c000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:02:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:02:56 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000000300000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:02:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) 20:02:56 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x7a}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:02:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 1799.844518] xt_l2tp: v2 tid > 0xffff: 131072 20:02:56 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendto$isdn(r0, &(0x7f00000000c0)={0x7, 0x7fffffff, "2893440bf0319da38fd1d904b40e2eae3056ac9b9accb950781225ac65fa8ee5f056b1915d73982abbe7cf7ddb15ad98e2e82a3453e7dff8d224a9cd91d3fd7e8cf540ed194417d6fabbe688872d369e54ce657f8ff5"}, 0x5e, 0x6040, &(0x7f0000000140)={0x22, 0x2, 0x7, 0x1, 0x6}, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x100, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x7f, 0x0, 0x9}}) 20:02:56 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x88}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:02:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)) 20:02:56 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f7680000000000000000000000000000003f0000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:02:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7, 0x111042) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) getegid() [ 1800.106862] xt_l2tp: v2 tid > 0xffff: 131072 20:02:56 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfffffffffffffc0e, 0x40) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xdf, "d49392fedaca33ec9cac6afd922f3c0dddd22cbc21f01ef94cabf393545bb21584153b988ce435442a47c4986894ddd4783915b3af112cbf60c7444002315dfebe98c8185e013428a55502fa455b2d49c772ac30a8191571ae611ae11e1de44e7f01b715a55f3ee50771e1d629f033ec8d4d69878ff2deb293bc1637cf9b8c9c3e79def432fe88233653c84dd15ce84a8f53b4fd9b8c98c517ed04da3375835281a57472959cf144b2cf0041b68ea039321eac322546ca2f7c3e0beb186400d9c97d77a3d9b13f59501fb0a782761959795b7350dce6f94ea8686b503c7c8f"}, &(0x7f0000000140)=0xe7) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r2, 0xfffffffd}, 0x8) 20:02:59 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x68000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:02:59 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000080)=""/158, &(0x7f0000000140)=""/114, &(0x7f00000001c0)=""/249, 0x2000}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x4, 0x0, 0x3f, 0x3}}) 20:02:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0xf0}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:02:59 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000000400000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:02:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/prev\x00') ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000140)={{0x0, 0x0, 0x80}}) r3 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000021c0)='/dev/ocfs2_control\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r5, &(0x7f0000002340)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYPTR=&(0x7f0000002200)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRESOCT, @ANYRES16=0x0, @ANYRES64, @ANYRESOCT, @ANYRES16, @ANYRES64, @ANYBLOB="e00d2384a01ce7bb1fec70c8dd30ee09822d66fd0d86f09d2a872281e9bab232be9c8c208c5edb363131d23a78196fe2f579c046d4e1bf5702e7c96d87a65654072f3f7224e53f"]], 0x3) r6 = dup(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$VIDIOC_S_CROP(r9, 0x4014563c, &(0x7f0000000080)={0x2, {0xffffffff, 0x3, 0x0, 0x7c5}}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$KDSKBLED(r6, 0x4b65, 0x10000) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000022c0)={[{0x800, 0x4, 0x1, 0x1, 0x3, 0x5, 0x74, 0x1, 0x6, 0x8, 0x36, 0x0, 0x6}, {0x4, 0x1, 0x3, 0x7f, 0x2, 0x2, 0x2d, 0x50, 0x8, 0x3, 0x9, 0x81, 0x100}, {0x7, 0x80, 0x9, 0xad, 0x6, 0x7a, 0x31, 0x80, 0xff, 0x1, 0x80, 0x38, 0x4}], 0xffffffff}) 20:02:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1803.006415] xt_l2tp: v2 tid > 0xffff: 131072 20:02:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(0xffffffffffffffff) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000080)=""/174, &(0x7f0000000140)=0xae) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x8, 0x7bb56774, 0xd0d5, 0x7fff, 0x1c, "d9bc96a096dcf87ed567a4489cd3fac9c063bb"}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000180)=0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000200), 0x4) 20:02:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000440)={@remote, @rand_addr="68d4b41238c2d4e5ea6c98bd38e42eb2", @loopback, 0x0, 0x20, 0xff, 0x100, 0x0, 0xfa6bd12bfffd48c2}) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$alg(r1, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@dev, @mcast1, @rand_addr="657261c70996f4e1596272e2ec4688fa", 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c204c6, r5}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000440)={@remote, @rand_addr="68d4b41238c2d4e5ea6c98bd38e42eb2", @loopback, 0x0, 0x20, 0xff, 0x100, 0x0, 0xfa6bd12bfffd48c2, r5}) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$alg(r6, 0x0, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={@dev, @mcast1, @rand_addr="657261c70996f4e1596272e2ec4688fa", 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c204c6, r10}) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000440)={@remote, @rand_addr="68d4b41238c2d4e5ea6c98bd38e42eb2", @loopback, 0x0, 0x20, 0xff, 0x100, 0x0, 0xfa6bd12bfffd48c2, r10}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="bc030000", @ANYRES16=0x0, @ANYBLOB="200029bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="d80102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72691d5c00000000ddffffff0000000000000000000000000000000049f75443a625bd54db9ec41eb9e3286b05000300", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004004803000008000100", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040007000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040009000000"], 0x3bc}, 0x1, 0x0, 0x0, 0x8000}, 0x1) [ 1803.143646] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1803.161798] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:02:59 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000001400000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:02:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1803.229073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1803.260313] xt_l2tp: v2 tid > 0xffff: 131072 [ 1803.261855] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1803.285150] 8021q: adding VLAN 0 to HW filter on device team0 [ 1803.324284] A link change request failed with some changes committed already. Interface K may have been left with an inconsistent configuration, please check. 20:02:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) 20:02:59 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000003420000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:00 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x6c000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:00 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x2}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x101, 0x0, 0x0, 0x2}}) 20:03:00 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x2, 0x4}}) 20:03:00 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000003440000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1803.617627] xt_l2tp: v2 tid > 0xffff: 131072 20:03:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x8000}}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xae}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x4000840) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x0, 0x8, 0x1, 0xffffffc0}}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000000)="d9b5524e0564e79e6c2c8e868e0983087077aab61838ddc05f28631ea35f023185") 20:03:00 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x3}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:00 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000004c0)={0x0, 0x0, 0x15, 0x1, 0xb7, &(0x7f00000000c0)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000000)) 20:03:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x3, {0x2, 0x800, 0x100, 0x100}}) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)={0x0, 0x14, 0xd5}) [ 1803.877271] xt_l2tp: v2 tid > 0xffff: 131072 20:03:00 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000001500000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:00 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x4}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1804.068127] xt_l2tp: v2 tid > 0xffff: 131072 20:03:03 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x74000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000000)={0x0, 0x9, 0x6, 0x8, 0x8}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) 20:03:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) read(0xffffffffffffffff, &(0x7f0000000080)=""/233, 0xe9) 20:03:03 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000000530000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:03 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x5}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1806.846764] xt_l2tp: v2 tid > 0xffff: 131072 20:03:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}) [ 1806.942997] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 20:03:03 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x6}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0xecb, 0x7, 0xe1, 0xbea, 0xc, "d694a5b77516a34b"}) 20:03:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x401, 0x8}}) 20:03:03 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000002600000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1806.988290] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1807.059761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1807.087765] xt_l2tp: v2 tid > 0xffff: 131072 20:03:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000080)={0x5, 0x1, @raw_data=[0x10000, 0x0, 0x80, 0x7fff, 0x81, 0x80000001, 0x8001, 0x89, 0xffff, 0x0, 0x5, 0x3, 0xaa, 0xec, 0x20, 0x6a]}) [ 1807.107531] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1807.125160] 8021q: adding VLAN 0 to HW filter on device team0 [ 1807.171407] A link change request failed with some changes committed already. Interface K may have been left with an inconsistent configuration, please check. 20:03:03 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x7a000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:03 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x7}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r2, 0xd}, 0x10) 20:03:03 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000003620000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:03 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='\x00', r0}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0xfffc}}) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000000)=0x2) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x1) 20:03:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1807.481062] xt_l2tp: v2 tid > 0xffff: 131072 20:03:04 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x40, 0xfffc}}) 20:03:04 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0xa}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:04 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000000640000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x601, 0x0, 0x6}}) [ 1807.681507] xt_l2tp: v2 tid > 0xffff: 131072 20:03:04 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$SG_IO(r0, 0x2285, &(0x7f00000011c0)={0x0, 0xfffffffffffffffe, 0x1000, 0x5, @buffer={0x0, 0xbc, &(0x7f0000000080)=""/188}, &(0x7f0000000140)="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", &(0x7f0000001140)=""/114, 0x360, 0x26, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x3}) 20:03:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000700)=0x0) rt_tgsigqueueinfo(0x0, r4, 0x1e, &(0x7f0000000740)={0x7, 0xef5, 0xfffffff7}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r7, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r7, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x100}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r8 = dup(r5) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000d00)=ANY=[@ANYBLOB="f00400001400020029bd7000fcdbdf252106f80001005543843946e2190507fec9eeb90b6b00903f144ff4f74eac1d9a2f064c9e56a6bc5cda97806c7e40b8b04928aa2d0a14c9bd6d1a75ad9f2d6e6486cda79a2a7a15b9cf12518745e9808a756144ec00db26eab5a300000000184086848c2dc1279db71d6ac54c99b2bc0f3465c42121594639e8ab743933687fa099164fcabe8005f3753e87b40452e23c228201cbdf5cbb123fd292151707e4d598f2cc821c2c1a795fed4dc055f9730d2772bd5d945f525b159e8a6d586afd26bd48cd007453be3d0b9ca4ea966d3a23e80954a1548fb652568d7c392a83f3e9bd65569864c0831d5c3c894174d162f11e250bf527e0e5f89c3219000100aa7afd12cb9b601f7a1a5d021f39fa25dd6cc278dc000000fe00010018515156f8a72fe6027d33b7715eaf470d0850d9f286d3a4c1b56c8903e81e84e06ee363d1b84a5a7f0d91bdeaacb480647f93d6c5058d8d155528ff2c724cab530276eea0a4deaf36bd426b60437c9c5a85ab72a65c317aba1c275cee2345319cf7cae7438eb7ca64c543b4896a7dc151fb8e664f52bc60260e22c781318128c78e6467e043f8a7694b25cfc6ebb84b5c2034fefcc4964f886bc3738e1a5125e6320306093dfd006fed44847baedce11689f778df6ab38a1a78184a8548cc07ad34789f99cef30022ad734ba1726bb4271b23776a711a4efd6e51b4cc8e59363d2fb3f7a55bd3e8614f36de1c64e7889758b1c0aeda4a8c3f15ccda0000d6000100ebad8f7daccd10206ebcbb2b3b58a0093c94445d56a5e35e28bd84a30a59f68c7399d82f4faf245e6e1e646f93f46467cd7d27e5d6e42cc682ccaba4fdbb3d5ee1bd4c5926068bf7470aab6c8366b82ec5580a75b78e5eea1a374e8180af2273ea07a345a2aca8d0d161d8803686a4b2afdcb07a316b38e5d4798f0121dbb829917e69f3ed1dfa568ba124db979382095ab00fefdc4188e5a844720f846a53b9edef3974848150c310b0097a91f9e09ebf98ef123b6e021e21c8347e6d272215147f099812f5b97d489a7e0cbfc4cf800c000000f20001008cd007b4b13e473d332a5b3f0a0d1b7f8b7dcf46ed4784fd85ad6ab28246a6bfe39530787a861205b11bbed4979259408a2098a776b084d46959e7b266b622b175fd730e82c8d5d934bf882e1bbbfb7bc3e840a200462d58ac6a10b779a7a698c0e3370144fbca4e74bb1a854e035d0cc5314874925c3d8f51e23f911d2dca1e1819407e1bb8753693c904d32c64c3c65b61d08016af021de77560674defbfe02ff6307c3be095cb75516a853deadc69550a8420934056c3e122ac38ec93dfb2b7dc9881337cc5b8f2663779aed55c1ca824542ff97baa0facb3a0514de33fd50bd09faf94bbf0bfa2eab0d23e0106ad3f9862e0d1b6fb0adf340df89ed72a7c95898032a1f20000f9000100c1e918b9b2770bde7311a3e658ebce56e08c6a62ff3e41d8970f7067621ae91e6b39b29fcd9f6989a35d67295803a05ca3eb4ef15e613f6d6b3088b474f0804615ad281aac265667298e32740327dbb3896395fd166fdfc2a9e4f8509e31a27c192a4d308f779ad93d76962ea6a0ceb3afc3f1f8a2b3ebe5a31ee308236ca6c9cf67af19fb8940aa08eb05ed0d98643f47b337c08e58a01b66649d65c47405a801469e1decf1f918d6bc6ac9546a3045f0d4bf88eaad7dd0cdbdd802477817665f4247849e0b3435eb343edaf57d7b368572f219572024b80512042e1646563ef2a50af6f06c30826075f1b50000000000000000"], 0x4f0}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) 20:03:07 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0xba0e0000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x11}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:07 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f7680000000000000000000000000000006e0000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) keyctl$set_reqkey_keyring(0xe, 0x6) 20:03:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x40000, 0x0) [ 1810.667765] xt_l2tp: v2 tid > 0xffff: 131072 20:03:07 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000001700000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1810.756318] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1810.765722] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:03:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) fsetxattr$security_capability(r1, &(0x7f0000000000)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0xfffffff9, 0x6}, {0x9, 0x9}]}, 0x14, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x1, 0x3, 0x180, 0xfffc, 0x10}}) 20:03:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x48}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1810.853378] 8021q: adding VLAN 0 to HW filter on device bond0 20:03:07 executing program 2: ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000340)={r4, 0x0, 0xffff, 0x0, 0xff, 0x1000, 0x3ff, 0xfff, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x6, 0xfffd, 0xffff7738, 0x5}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000340)={r3, 0x7d, 0xffff, 0x0, 0xff, 0x0, 0x3fd, 0xeff, {r4, @in6={{0xa, 0x4e20, 0xefb, @remote, 0xffff0004}}, 0x6, 0x7, 0xffff7738, 0x85}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={r3, 0x5, 0x40, 0xfffffffc, 0x9, 0x80}, 0x14) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x1, {0x6, 0x5, "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", 0x3, 0x3, 0x7, 0x6, 0x1, 0xff, 0x7, 0x1}, r6}}, 0x128) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x8, 0xd01a, 0x0, 0x1c, 0x4}}) [ 1810.923280] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1810.930350] xt_l2tp: v2 tid > 0xffff: 131072 [ 1810.941139] 8021q: adding VLAN 0 to HW filter on device team0 20:03:07 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000000780000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:07 executing program 2: ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x9, 0x3f}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000080)=""/191) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3}) [ 1811.009352] A link change request failed with some changes committed already. Interface K may have been left with an inconsistent configuration, please check. 20:03:07 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0xd8000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x4c}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x6, 0x0, 0x2, {0x1ff, 0x100, 0x1, 0xffffffe0}}) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000002c0)) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r4 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x3f, 0x565040) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3fb, 0x200, 0x70bd2b, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$SNDRV_PCM_IOCTL_RESET(r3, 0x4141, 0x0) 20:03:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40c841, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1500000065ffff01804000"], 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$P9_RREADDIR(r3, &(0x7f0000000280)={0x49, 0x29, 0x1, {0x5ca, [{{0x1, 0x1, 0x8}, 0xffffffffffffffff, 0xff, 0x7, './file0'}, {{0x8, 0x4, 0x1}, 0xfffffffffffffffe, 0x4, 0x7, './file0'}]}}, 0x49) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000200)={@initdev, @local}, &(0x7f0000000240)=0xc) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000340)={0x1, 0x30, 0xc3, 0x0, 0x13, 0x101, &(0x7f0000000300)="9552be2a938f2b741813a97766d805384e45ae"}) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) recvmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)}, 0x40012100) 20:03:07 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000003800000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1811.338900] xt_l2tp: v2 tid > 0xffff: 131072 20:03:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000080)={0x3d0000, 0x7fffffff, 0x4, r3, 0x0, &(0x7f0000000000)={0x9a0909, 0xfff, [], @value=0x6}}) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) 20:03:07 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1500000065ffff01804000"], 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$P9_RLOPEN(r3, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x0, 0x4}, 0xe}}, 0x18) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x800, 0xfffa, 0x3}}) 20:03:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x60}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:08 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000000880000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1811.582338] xt_l2tp: v2 tid > 0xffff: 131072 20:03:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) 20:03:08 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x68}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1811.801766] xt_l2tp: v2 tid > 0xffff: 131072 20:03:10 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:10 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f7680000000000000000000000000000038d0000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) syncfs(r2) read(r1, &(0x7f0000000080)=""/160, 0xa0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) 20:03:10 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x6c}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) 20:03:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x9, 0x3f}) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x6, 0x9, 0x3f}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x5c, 0x0, [], 0x8, 0x6}) [ 1814.497521] xt_l2tp: v2 tid > 0xffff: 131072 20:03:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) 20:03:11 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000002900000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:11 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x74}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1814.780931] xt_l2tp: v2 tid > 0xffff: 131072 20:03:11 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r2 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) r3 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) poll(&(0x7f0000000100)=[{r1}, {r2, 0x6404}, {r3, 0x204}, {r4}, {r0, 0x208}, {r0, 0x8}], 0x6, 0x800) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) setsockopt$inet_dccp_int(r5, 0x21, 0x1, &(0x7f0000000000)=0xc8, 0x4) 20:03:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:11 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000000980000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="1500000065ffff01804000"], 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x80818, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L='version=9p2000.L'}, {@uname={'uname', 0x3d, 'vboxnet1GPL*.{cpuset;@'}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@uid_gt={'uid>', r4}}, {@hash='hash'}, {@smackfsfloor={'smackfsfloor', 0x3d, '['}}]}}) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x8b62, 0x40000) 20:03:11 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x7a}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1815.048049] xt_l2tp: v2 tid > 0xffff: 131072 20:03:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x1}}) 20:03:11 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000003a00000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:11 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x88}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:11 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x3, {0x2, 0x0, 0x0, 0x6, 0x8004}}) [ 1815.262900] xt_l2tp: v2 tid > 0xffff: 131072 [ 1815.267092] device lo entered promiscuous mode [ 1815.282405] device tunl0 entered promiscuous mode [ 1815.302191] device gre0 entered promiscuous mode [ 1815.309106] device gretap0 entered promiscuous mode [ 1815.319796] device erspan0 entered promiscuous mode [ 1815.327498] device ip_vti0 entered promiscuous mode [ 1815.346378] device ip6_vti0 entered promiscuous mode [ 1815.367491] device sit0 entered promiscuous mode [ 1815.373893] device ip6tnl0 entered promiscuous mode [ 1815.395173] device ip6gre0 entered promiscuous mode [ 1815.404946] device syz_tun entered promiscuous mode [ 1815.425663] device ip6gretap0 entered promiscuous mode [ 1815.442213] device bridge0 entered promiscuous mode [ 1815.449114] device vcan0 entered promiscuous mode [ 1815.461975] device bond0 entered promiscuous mode [ 1815.467017] device bond_slave_0 entered promiscuous mode [ 1815.472702] device bond_slave_1 entered promiscuous mode [ 1815.482678] device team0 entered promiscuous mode [ 1815.489056] device team_slave_0 entered promiscuous mode [ 1815.494840] device team_slave_1 entered promiscuous mode [ 1815.500476] device dummy0 entered promiscuous mode [ 1815.505628] device nlmon0 entered promiscuous mode [ 1815.510663] device K entered promiscuous mode [ 1815.515466] device batadv0 entered promiscuous mode [ 1815.520593] device vxcan0 entered promiscuous mode [ 1815.526291] device vxcan1 entered promiscuous mode [ 1815.531294] device veth0 entered promiscuous mode [ 1815.536390] device veth1 entered promiscuous mode [ 1815.541415] device xfrm0 entered promiscuous mode [ 1815.546460] device veth0_to_bridge entered promiscuous mode [ 1815.552337] device veth1_to_bridge entered promiscuous mode [ 1815.558367] device veth0_to_bond entered promiscuous mode [ 1815.564237] device veth1_to_bond entered promiscuous mode [ 1815.569998] device veth0_to_team entered promiscuous mode [ 1815.575888] device veth1_to_team entered promiscuous mode [ 1815.581620] device veth0_to_batadv entered promiscuous mode [ 1815.587537] device batadv_slave_0 entered promiscuous mode [ 1815.593279] device veth1_to_batadv entered promiscuous mode [ 1815.599188] device batadv_slave_1 entered promiscuous mode [ 1815.605053] device veth0_to_hsr entered promiscuous mode [ 1815.610669] device veth1_to_hsr entered promiscuous mode [ 1815.616404] device hsr0 entered promiscuous mode [ 1815.621298] device veth1_virt_wifi entered promiscuous mode [ 1815.627206] device veth0_virt_wifi entered promiscuous mode [ 1815.633270] device vlan0 entered promiscuous mode [ 1815.638338] device vlan1 entered promiscuous mode [ 1815.643299] device macvlan0 entered promiscuous mode [ 1815.648595] device macvlan1 entered promiscuous mode [ 1815.653855] device ipvlan0 entered promiscuous mode [ 1815.659655] device ipvlan1 entered promiscuous mode [ 1815.665502] device macvtap0 entered promiscuous mode [ 1815.671179] device macsec0 entered promiscuous mode [ 1815.676429] device geneve0 entered promiscuous mode [ 1815.681560] device geneve1 entered promiscuous mode [ 1815.686790] device bond1 entered promiscuous mode [ 1815.691760] device bridge_slave_1. entered promiscuous mode [ 1815.697681] device bond2 entered promiscuous mode 20:03:14 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:14 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0xf0}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x4000, 0x0, 0x0, 0x0, 0x1}}) 20:03:14 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000003be0000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000080)={0xfffffffd, 0x7, 0x8, 0xffff, 0x101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = dup(r1) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f00000000c0)={0x5, 0x0, [{}, {}, {}, {}, {}]}) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f0000000000)={0xa, 0xa8ea, 0x5}) [ 1818.109391] xt_l2tp: v2 tid > 0xffff: 131072 20:03:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000080)=""/69) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) 20:03:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:14 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000000c10000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$alg(r2, 0x0, 0x0, 0x80800) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$cont(0x18, 0x0, 0x9, 0x2) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000200)="469644b2bdf5b04259ce49638379a6c13d340ce592f93fad3d7fae9a7ac87b6542619207256062af857f2d0be9afb1681968cee84792e40100010002f12f094a2692d58beb493f39e61cdd04695b5df047c51bc42d993286737f3d965dff01000000000000c7d4daf3fbe57fc379349de03a6fc61c88c42b69853af564909e5fafc21d795f9693145f7d8f924c6d08183e2a1179b80657b6d07d1e9904fdbea0e584f9fc8fc253b9095179022448c0dcdc61") ptrace$cont(0x20, 0x0, 0x0, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@loopback, @mcast1, @rand_addr="657261c70996f4e1596272e2ec4688fa", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x20c204c6, r6}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000440)={@remote, @rand_addr="68d4b41238c2d4e5ea6c98bd38e42eb2", @loopback, 0x0, 0x20, 0xff, 0x100, 0x0, 0xfa6bd12bfffd48c2, r6}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', r6}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) fcntl$addseals(r0, 0x409, 0x4) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x1f}}) [ 1818.261025] device lo left promiscuous mode [ 1818.271858] device tunl0 left promiscuous mode [ 1818.293606] device gre0 left promiscuous mode 20:03:14 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1818.310862] device gretap0 left promiscuous mode [ 1818.353164] device erspan0 left promiscuous mode [ 1818.360078] xt_l2tp: v2 tid > 0xffff: 131072 [ 1818.378293] device ip_vti0 left promiscuous mode [ 1818.390105] device ip6_vti0 left promiscuous mode [ 1818.398908] device sit0 left promiscuous mode [ 1818.422452] device ip6tnl0 left promiscuous mode [ 1818.443130] device ip6gre0 left promiscuous mode [ 1818.452966] device syz_tun left promiscuous mode [ 1818.459382] device ip6gretap0 left promiscuous mode [ 1818.472713] device bridge0 left promiscuous mode [ 1818.490962] device vcan0 left promiscuous mode 20:03:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x10, 0xfffd, 0x1}}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440f00baebf274ffbd4ebba640b768472c1566e2c21a78a2f5c3f8ae44a68a74cc873bfc17c7d6dcdedc34b72cbdc2b4650ae2f02ca69c09995020e42de3a785b87a0f87abe0adde4b227992d4f54b2f5f0b334e0f29ea61e2bcaff9a0048753b48800"/116, @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf251b00060000000400cc001c00228d08000500ef000000080003000200000008fe030000010000eda09089"], 0x3}, 0x1, 0x0, 0x0, 0x24040851}, 0x20044085) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0xe) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0xe) ptrace$cont(0x20, r4, 0x0, 0xd7) ptrace$setregs(0xf, r4, 0xfffffffffffffffe, &(0x7f0000000200)="0f179993f390c9cbdb6adb2353ffca8d9d0396ab932ea22c2ffef5e5c995de09f479e871584160a4f383dd1bfa27d2e9db1f271a69aefab6e28fe862686410669fd1ac5c0bfd5a6cdbb77451722909e9df61654c85c232a96bb0a3f4405427e77d831e2bd3a7c5d1f0689bcb2762aba4c937a25e9745f3f79881a0f20b1224b93d2f9d242c3fe94c42d308776f74592c") ptrace$cont(0x20, 0x0, 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000140)) ptrace$cont(0x20, r4, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0600000047aa3a4619803373d2223da1ab029a906fdd2e6b6131cf15a6869d41aabe88b9a3fb694b880935928f898e247254f6d74315b9bbc83385c497932a8ae7c713a6d9b73a4178008492421173a98a3f28e330c632ad5f8cc7cb9337fa93e5220ff7a7ec3029d2b7780e3fa9ca83bf314ef877e5c99ce91730aa3b7dd3b37b017093f72c87381c9946b553346aaf1d579bddf3fcf0062d2b9eaade73a028cf8654583ed54e85d65bc3ce546ccc0852bfa2a73714055f468764889e1b2ae3f239e7d0c782d9a2d7fc0e4e7f6cdf7af9175e1bff28a67f8a149782a2d4db706da40f6fc61ffa13dd716b254b2712c1a7e87c24e751e44aceb15f1db0b9e8c7926cecd04a8af8001cae49a1c64d7070b843454345ba6bda915f90137f51e46e252e667f4aa4884ca8809345c1a908f804b139b604582805ad33872ad4d12d9bee8bfe4006a00fc7d77a266c693fbea5dc359365e08be213423bcb57f98a38de9201e71bab613c6e5f6fb59fe0b393adc9b4c534283b2fae3f93f21339e7bb74d8ef9497acc52dfed7b4661ac52dc264bd0cdd93b8d62a7ce4092d331ca5577651ede07558020cd8831b1ad35ce64c7f843860e44e411c1c225b606674c2770421c3f3a17127c0cf97ba50c2cb2e", @ANYRES16=r3, @ANYBLOB="00012abd7000fddbdf253100944726b41bf3bc39360e497369db", @ANYRES16=r2, @ANYBLOB], 0x5}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080) [ 1818.523248] device bond0 left promiscuous mode [ 1818.552492] device team0 left promiscuous mode [ 1818.577836] device dummy0 left promiscuous mode [ 1818.582868] device nlmon0 left promiscuous mode [ 1818.587984] device K left promiscuous mode [ 1818.592610] device batadv0 left promiscuous mode [ 1818.598138] device vxcan0 left promiscuous mode [ 1818.603086] device vxcan1 left promiscuous mode [ 1818.609483] device veth0 left promiscuous mode [ 1818.615020] device veth1 left promiscuous mode [ 1818.620779] device xfrm0 left promiscuous mode [ 1818.626253] device veth0_to_bridge left promiscuous mode [ 1818.631978] device veth1_to_bridge left promiscuous mode [ 1818.638119] device veth0_to_bond left promiscuous mode [ 1818.643844] device bond_slave_0 left promiscuous mode [ 1818.649609] device veth1_to_bond left promiscuous mode [ 1818.655763] device bond_slave_1 left promiscuous mode [ 1818.661090] device veth0_to_team left promiscuous mode [ 1818.666627] device team_slave_0 left promiscuous mode [ 1818.671942] device veth1_to_team left promiscuous mode [ 1818.677525] device team_slave_1 left promiscuous mode [ 1818.682896] device veth0_to_batadv left promiscuous mode [ 1818.688594] device batadv_slave_0 left promiscuous mode [ 1818.694266] device veth1_to_batadv left promiscuous mode [ 1818.699980] device batadv_slave_1 left promiscuous mode [ 1818.705564] device veth0_to_hsr left promiscuous mode [ 1818.710953] device veth1_to_hsr left promiscuous mode [ 1818.716499] device hsr0 left promiscuous mode [ 1818.721094] device veth1_virt_wifi left promiscuous mode [ 1818.726888] device veth0_virt_wifi left promiscuous mode [ 1818.732672] device vlan0 left promiscuous mode [ 1818.737511] device vlan1 left promiscuous mode [ 1818.742213] device macvlan0 left promiscuous mode [ 1818.747267] device macvlan1 left promiscuous mode [ 1818.752215] device ipvlan0 left promiscuous mode [ 1818.757204] device ipvlan1 left promiscuous mode [ 1818.762205] device macvtap0 left promiscuous mode [ 1818.767232] device macsec0 left promiscuous mode [ 1818.772119] device geneve0 left promiscuous mode [ 1818.777237] device geneve1 left promiscuous mode [ 1818.782137] device bond1 left promiscuous mode [ 1818.786958] device bridge_slave_1. left promiscuous mode [ 1818.792517] device bond2 left promiscuous mode 20:03:15 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:15 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000003c80000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:15 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x2}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x700}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0xffff, 0x2, 0x4, 0x100000, 0x7, {0x77359400}, {0x1, 0xc, 0x0, 0x1, 0x4, 0x20, "3c16345e"}, 0x6, 0x1, @userptr=0x8, 0x9, 0x0, r0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000100)=0x4) 20:03:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xb0800, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) fcntl$notify(r2, 0x402, 0x0) [ 1819.035440] device lo entered promiscuous mode [ 1819.046097] xt_l2tp: v2 tid > 0xffff: 131072 [ 1819.047009] device tunl0 entered promiscuous mode [ 1819.078234] device gre0 entered promiscuous mode [ 1819.083351] device gretap0 entered promiscuous mode [ 1819.089317] device erspan0 entered promiscuous mode [ 1819.095652] device ip_vti0 entered promiscuous mode [ 1819.101117] device ip6_vti0 entered promiscuous mode [ 1819.107114] device sit0 entered promiscuous mode [ 1819.113043] device ip6tnl0 entered promiscuous mode [ 1819.129051] device ip6gre0 entered promiscuous mode [ 1819.151489] device syz_tun entered promiscuous mode 20:03:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendto$rose(r2, &(0x7f0000000080)="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", 0x1000, 0x51, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(r3, 0x0, 0x48001) accept4$alg(r3, 0x0, 0x0, 0x0) ptrace$cont(0x20, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/softnet_stat\x00') setsockopt$inet6_dccp_buf(r4, 0x21, 0x80, &(0x7f0000001100)="e961eb10e20617faba272996abfbade2976996ebe3d2c929910ef2b4912f5b643b61be24f5fc4e45a448ee3bd0e629c0b4de157c9b08f1e17c0d8004f729d53bfb3b020996b66616e397094bb35a145b75f4fe13d2681eb897989442f42b46bd47c216ed4e5a30229fc8518b9ff9845753f1817712832440916752dbbd32976e57f6abcac49a02aecb89965906e513a06767760aa3bc793f3ca0c76a1db01acc05da16fb879af3a06856c6ddfcfeff8a95323987fc1809c5610c4a4f358f2bac3618b292af50ae5e385d4988a14ed654de", 0xd1) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x41) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0xe) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000003300)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000032c0)={&(0x7f0000003340)={0x21f0, 0xb, 0xb, 0x201, 0x70bd29, 0x25dfdbfb, {0x2, 0x0, 0x4}, [@generic="9096497e09d22822547a52336ac83e16a93ace2ac92b2dc62f5bed4d1cea35b49b9c40dd5a4bdc27e761c1d46d6108aa568fa0e8de80f0572c73c19c509e5c72f3d3c2c8610dd9a8984dab1cf07345f235ab8de45ffeaba2416dfbe8cc1d268163a77b", @nested={0x1018, 0x84, 0x0, 0x1, [@typed={0x14, 0x76, 0x0, 0x0, @ipv6=@mcast2}, @generic="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"]}, @generic="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", @nested={0xb5, 0x1a, 0x0, 0x1, [@typed={0x8, 0x24, 0x0, 0x0, @pid=r5}, @generic="d3cfd466b116f13f6337415bf8495655a443ad45d7bc3c81b95d3c88472af042100919e5f940237554c40caa31a6955dd622433b2106ed8a19f779572815e80cfa38d43bf200b2b1240a363f961b9676d27870fafa00abd32285090d8f990ae6b0672bc34e29738b5b68abc94b960e5a31534b6633369730170a716504b758fb76ae252a0f9f6cd3c931380c6f67459772f4ec9ac160e5e4818ae492b72d95baddad68669f0e247293"]}, @generic="b37e2f2d6b18cd9d920ce7420baaa412b049850ef9dddc7185a4b2dd8a202769bcc4a7f9aa06a7ce440316bdd7906cf7fac2d231298f7c93463d8dd3fd0a0a69a364327a7a358ae334d73d9e1a124de57295816ac727c85609e34b252ad21e82265f6594e5aefd59190afd7cb78101b93630d35032c88cab76d966aa0612aa7b14478567b83f85c506139261dfe86d4ee780a7ce4b926ca913587782", @typed={0x8, 0x59, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x4, 0xe}]}, 0x21f0}, 0x1, 0x0, 0x0, 0x810}, 0x40) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) [ 1819.173864] device ip6gretap0 entered promiscuous mode 20:03:15 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x3}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:15 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000002d00000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1819.198343] device bridge0 entered promiscuous mode [ 1819.224318] device vcan0 entered promiscuous mode 20:03:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e) [ 1819.250936] device bond0 entered promiscuous mode [ 1819.255147] xt_l2tp: v2 tid > 0xffff: 131072 [ 1819.281225] device bond_slave_0 entered promiscuous mode [ 1819.292340] device bond_slave_1 entered promiscuous mode [ 1819.309757] device team0 entered promiscuous mode [ 1819.328730] device team_slave_0 entered promiscuous mode [ 1819.344248] device team_slave_1 entered promiscuous mode 20:03:15 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x4}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:15 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000003d00000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1819.372340] device dummy0 entered promiscuous mode [ 1819.391792] device nlmon0 entered promiscuous mode [ 1819.398433] device K entered promiscuous mode [ 1819.416290] device batadv0 entered promiscuous mode [ 1819.432730] device vxcan0 entered promiscuous mode [ 1819.458598] xt_l2tp: v2 tid > 0xffff: 131072 [ 1819.464667] device vxcan1 entered promiscuous mode [ 1819.486013] device veth0 entered promiscuous mode [ 1819.492655] device veth1 entered promiscuous mode [ 1819.501394] device xfrm0 entered promiscuous mode [ 1819.510547] device veth0_to_bridge entered promiscuous mode [ 1819.520706] device veth1_to_bridge entered promiscuous mode [ 1819.530498] device veth0_to_bond entered promiscuous mode [ 1819.543249] device veth1_to_bond entered promiscuous mode [ 1819.553250] device veth0_to_team entered promiscuous mode [ 1819.563739] device veth1_to_team entered promiscuous mode [ 1819.575429] device veth0_to_batadv entered promiscuous mode [ 1819.581915] device batadv_slave_0 entered promiscuous mode [ 1819.588312] device veth1_to_batadv entered promiscuous mode [ 1819.594425] device batadv_slave_1 entered promiscuous mode [ 1819.600334] device veth0_to_hsr entered promiscuous mode [ 1819.606228] device veth1_to_hsr entered promiscuous mode [ 1819.614873] device hsr0 entered promiscuous mode [ 1819.623424] device veth1_virt_wifi entered promiscuous mode [ 1819.629413] device veth0_virt_wifi entered promiscuous mode [ 1819.635608] device vlan0 entered promiscuous mode [ 1819.641462] device vlan1 entered promiscuous mode [ 1819.646668] device macvlan0 entered promiscuous mode [ 1819.651981] device macvlan1 entered promiscuous mode [ 1819.657487] device ipvlan0 entered promiscuous mode [ 1819.662718] device ipvlan1 entered promiscuous mode [ 1819.682860] device macvtap0 entered promiscuous mode [ 1819.688166] device macsec0 entered promiscuous mode [ 1819.693293] device geneve0 entered promiscuous mode [ 1819.698628] device geneve1 entered promiscuous mode [ 1819.703749] device bond1 entered promiscuous mode [ 1819.708824] device bridge_slave_1. entered promiscuous mode [ 1819.714776] device bond2 entered promiscuous mode 20:03:16 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000000)) 20:03:16 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x5}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:16 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000001d40000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:16 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x3, 0x0, 0x2, 0x4}}) [ 1820.036310] xt_l2tp: v2 tid > 0xffff: 131072 20:03:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa00}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000000)) 20:03:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000)=0x32) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) 20:03:16 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000000e00000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:16 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x6}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1820.167762] device lo left promiscuous mode [ 1820.225219] device tunl0 left promiscuous mode [ 1820.244303] device gre0 left promiscuous mode [ 1820.262430] xt_l2tp: v2 tid > 0xffff: 131072 [ 1820.268485] device gretap0 left promiscuous mode 20:03:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x14, 0x0, 0x2, 0x3}}) [ 1820.301399] device erspan0 left promiscuous mode [ 1820.319973] device ip_vti0 left promiscuous mode [ 1820.348793] device ip6_vti0 left promiscuous mode [ 1820.364458] device sit0 left promiscuous mode [ 1820.376414] device ip6tnl0 left promiscuous mode [ 1820.391267] device ip6gre0 left promiscuous mode [ 1820.432514] device syz_tun left promiscuous mode [ 1820.445889] device ip6gretap0 left promiscuous mode [ 1820.457858] device bridge0 left promiscuous mode [ 1820.469250] device vcan0 left promiscuous mode [ 1820.491266] device bond0 left promiscuous mode [ 1820.497823] device team0 left promiscuous mode [ 1820.502846] device dummy0 left promiscuous mode [ 1820.509030] device nlmon0 left promiscuous mode [ 1820.513857] device K left promiscuous mode [ 1820.518408] device batadv0 left promiscuous mode [ 1820.523291] device vxcan0 left promiscuous mode [ 1820.528403] device vxcan1 left promiscuous mode [ 1820.533136] device veth0 left promiscuous mode [ 1820.537904] device veth1 left promiscuous mode [ 1820.542633] device xfrm0 left promiscuous mode [ 1820.547408] device veth0_to_bridge left promiscuous mode [ 1820.553007] device veth1_to_bridge left promiscuous mode [ 1820.558820] device veth0_to_bond left promiscuous mode [ 1820.564447] device bond_slave_0 left promiscuous mode [ 1820.569769] device veth1_to_bond left promiscuous mode [ 1820.575320] device bond_slave_1 left promiscuous mode [ 1820.580606] device veth0_to_team left promiscuous mode [ 1820.586058] device team_slave_0 left promiscuous mode [ 1820.591334] device veth1_to_team left promiscuous mode [ 1820.597279] device team_slave_1 left promiscuous mode [ 1820.602589] device veth0_to_batadv left promiscuous mode [ 1820.608208] device batadv_slave_0 left promiscuous mode [ 1820.613669] device veth1_to_batadv left promiscuous mode [ 1820.619277] device batadv_slave_1 left promiscuous mode [ 1820.624839] device veth0_to_hsr left promiscuous mode [ 1820.630172] device veth1_to_hsr left promiscuous mode [ 1820.635688] device hsr0 left promiscuous mode [ 1820.640282] device veth1_virt_wifi left promiscuous mode [ 1820.645948] device veth0_virt_wifi left promiscuous mode [ 1820.651632] device vlan0 left promiscuous mode [ 1820.656407] device vlan1 left promiscuous mode [ 1820.661137] device macvlan0 left promiscuous mode [ 1820.666153] device macvlan1 left promiscuous mode [ 1820.671193] device ipvlan0 left promiscuous mode [ 1820.676102] device ipvlan1 left promiscuous mode [ 1820.681198] device macvtap0 left promiscuous mode [ 1820.686265] device macsec0 left promiscuous mode [ 1820.691150] device geneve0 left promiscuous mode [ 1820.696082] device geneve1 left promiscuous mode [ 1820.700999] device bond1 left promiscuous mode [ 1820.705838] device bridge_slave_1. left promiscuous mode [ 1820.711417] device bond2 left promiscuous mode 20:03:19 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:19 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000003e00000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:19 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x7}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:19 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'lo\x00', {}, 0x2}) read$dsp(0xffffffffffffffff, &(0x7f0000000080)=""/140, 0x8c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000200)={0x9, @output={0x1000, 0x0, {0x4, 0x5}, 0x6, 0xffff}}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x1, 0x0, 0x0, 0xfffd}}) 20:03:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000080)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x913, 0x4) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) recvfrom(r5, &(0x7f00000000c0)=""/48, 0x30, 0x40000102, &(0x7f0000000100)=@phonet={0x23, 0x12, 0x1f, 0x2}, 0x80) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x3}) 20:03:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc00}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$VIDIOC_G_ENC_INDEX(r3, 0x8818564c, &(0x7f0000000340)) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000080)={0xf9, "d4dba2ec49ebe81a6bd37980bd1ab6de0536855e6bf6e25c82de4ce39266d7fbd9f900177d3d38071c3f865e93305d2aabf544bcdd15179890179654c841fff627e4ce6258bace42d6111ebf422c5524c89dc763975e9a7001416fdd8eebf1fed1d56c65be0a46fb672ae8e6068d2b98a53df1d59f49ef32dcb2a7c1971370857459af969e054ae659d8a0eab40ee09284be97152c8ddaa08bae150eadec3b0f0074ffae0272533c7b626f587f9da51b6832fe0d8c6e9f06f4a6bcbe6295422f842de8055be7721d33106c47bf95cbbeeb1d40b226437b44cafca22526d7105c69d3e7b324e6c9a9717e69a2b86e5f9e3e902d32ffdaee0ce5579adb12a5ab8433b0ee440368624b8d707d4ce5a1c7a9a91fce6b8fa65f23bd6c8ee46ea77467d3263f872dd19308bee2b0d86a6bb085a4c0b4bd8cba6819b12f7cad94fdfd5b53bbcdc31fd917e2dc7c453bdafd602bb68f68c88591fbcb82d802d6b2cd7a336a6bea0da69cec0ca015f02804762ac9163efdc7c096a86eb8290b7fc1ae5750baf242743731c3ad86fbb93063655d2db78d69ff44db28ddac3853260142405f318a6dcb4d3cb540fa6f8e4990f353edca33e404eea495dbdb0e90c648630a62a2db8ebe9fcb3c2fe63d3cce716de05f1d15adef312ad8ab88c84421235d40931dd4cd0bdab2fc740d09f054268af3800dd67a0853ba576ae608c64bfda197ca"}) accept4$bt_l2cap(r1, &(0x7f00000002c0), &(0x7f0000000300)=0xe, 0x800) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x2, 0x0, 0x0, 0x1}}) [ 1823.158979] audit: type=1400 audit(1584475399.594:87): avc: denied { setopt } for pid=28480 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 [ 1823.189882] xt_l2tp: v2 tid > 0xffff: 131072 20:03:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe00}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:19 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000001e40000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}) 20:03:19 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0xa}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:19 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x2, 0x0, 0xfffd}}) [ 1823.486558] xt_l2tp: v2 tid > 0xffff: 131072 20:03:22 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) 20:03:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1197}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/162) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r3 = dup2(r0, r2) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000000)={0x38, 0x1ff, 0x800}) 20:03:22 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000002e80000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:22 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x11}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1826.299274] xt_l2tp: v2 tid > 0xffff: 131072 [ 1826.300280] device lo entered promiscuous mode [ 1826.332737] device tunl0 entered promiscuous mode [ 1826.352653] device gre0 entered promiscuous mode [ 1826.376462] device gretap0 entered promiscuous mode [ 1826.395128] device erspan0 entered promiscuous mode 20:03:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(r3, 0x0, 0x48001) accept4$alg(r3, 0x0, 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r1, 0x80045005, &(0x7f0000000200)) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x41) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000100)={r2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)={0x80000001, 0x8, 0x4, 0x10, 0x3, {0x0, 0x7530}, {0x4, 0x0, 0x66, 0x3f, 0x40, 0xf8, "902d8eee"}, 0x1, 0x1, @fd, 0x0, 0x0, r2}) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x7, 0x0, 0x10, 0x677a11d373560d05}}) 20:03:22 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x48}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:22 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000003e80000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1826.429279] device ip_vti0 entered promiscuous mode [ 1826.468003] device ip6_vti0 entered promiscuous mode [ 1826.490192] device sit0 entered promiscuous mode [ 1826.502839] xt_l2tp: v2 tid > 0xffff: 131072 20:03:23 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x4c}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1826.547070] device ip6tnl0 entered promiscuous mode [ 1826.562480] device ip6gre0 entered promiscuous mode [ 1826.578743] device syz_tun entered promiscuous mode [ 1826.588852] device ip6gretap0 entered promiscuous mode [ 1826.602008] device bridge0 entered promiscuous mode [ 1826.611466] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1826.622611] device vcan0 entered promiscuous mode [ 1826.630706] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1826.641802] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:03:23 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000003e90000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1826.660832] device bond0 entered promiscuous mode [ 1826.664173] xt_l2tp: v2 tid > 0xffff: 131072 [ 1826.668351] device bond_slave_0 entered promiscuous mode [ 1826.677442] device bond_slave_1 entered promiscuous mode [ 1826.691759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1826.703710] device team0 entered promiscuous mode 20:03:23 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x60}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1826.710609] device team_slave_0 entered promiscuous mode [ 1826.722406] device team_slave_1 entered promiscuous mode [ 1826.730140] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1826.737020] 8021q: adding VLAN 0 to HW filter on device team0 [ 1826.745416] device dummy0 entered promiscuous mode [ 1826.753154] device nlmon0 entered promiscuous mode [ 1826.784277] device K entered promiscuous mode [ 1826.798842] A link change request failed with some changes committed already. Interface K may have been left with an inconsistent configuration, please check. [ 1826.835470] xt_l2tp: v2 tid > 0xffff: 131072 20:03:23 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x9, 0x3f}) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000000)={0xfff, 0x3, 0x4, 0x0, 0x5, 0x5}) 20:03:23 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000001ef0000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000000)) 20:03:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:23 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x68}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1827.089690] xt_l2tp: v2 tid > 0xffff: 131072 20:03:23 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) r1 = syz_open_dev$media(&(0x7f00000010c0)='/dev/media#\x00', 0x100000000, 0x301000) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r3, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x28, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x40050) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000001080)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/4096, 0x1000}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000040)={0x3}) 20:03:23 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x9, 0x7, 0x1, "44f1d30a725e671d3669c30a648e1c98a100f9b4c42ce6e816b5a502c15be76e", 0xb5315241}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x3}) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, 0x0, 0x48001) accept4$alg(r2, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000200)=0x5df2) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x41) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x400}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000000c0)={r3, 0x9, 0x8a, "224038895cc17d5d161446128da6572ad9bf26e49fcc71d0437aa2c1a4869eb09fca93690278212b3b3f134dea79a585294eb197cc75d915f737613aa765c3949f38fbbf2a76789349ac98c17f4b15ced5a8a188c939fe5596dbec61aa9da46fbfe9bf97460f22334f7925e65fdf01a8fb36ba72278de4a68650e374eeaa032f1b720e502e906e730911"}, 0x92) 20:03:23 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000001f00000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:23 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x6c}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1827.296618] device batadv0 entered promiscuous mode [ 1827.321957] device vxcan0 entered promiscuous mode [ 1827.336643] device vxcan1 entered promiscuous mode [ 1827.342347] device veth0 entered promiscuous mode [ 1827.348862] device veth1 entered promiscuous mode [ 1827.355269] device xfrm0 entered promiscuous mode [ 1827.361150] device veth0_to_bridge entered promiscuous mode 20:03:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x87e, 0xf}}) ioctl$TCGETX(r0, 0x5432, &(0x7f0000000000)) [ 1827.368691] device veth1_to_bridge entered promiscuous mode [ 1827.376936] device veth0_to_bond entered promiscuous mode [ 1827.386366] xt_l2tp: v2 tid > 0xffff: 131072 [ 1827.391372] device veth1_to_bond entered promiscuous mode [ 1827.400031] device veth0_to_team entered promiscuous mode [ 1827.414435] device veth1_to_team entered promiscuous mode [ 1827.421490] device veth0_to_batadv entered promiscuous mode [ 1827.435697] device batadv_slave_0 entered promiscuous mode [ 1827.457709] device veth1_to_batadv entered promiscuous mode 20:03:23 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000003f00000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1827.479354] device batadv_slave_1 entered promiscuous mode [ 1827.485430] device veth0_to_hsr entered promiscuous mode [ 1827.500101] device veth1_to_hsr entered promiscuous mode [ 1827.522428] device hsr0 entered promiscuous mode [ 1827.536794] device veth1_virt_wifi entered promiscuous mode [ 1827.545866] device veth0_virt_wifi entered promiscuous mode [ 1827.561776] device vlan0 entered promiscuous mode [ 1827.573239] device vlan1 entered promiscuous mode [ 1827.578675] device macvlan0 entered promiscuous mode [ 1827.592923] device macvlan1 entered promiscuous mode [ 1827.603301] device ipvlan0 entered promiscuous mode [ 1827.609454] device ipvlan1 entered promiscuous mode [ 1827.618089] device macvtap0 entered promiscuous mode [ 1827.623665] device macsec0 entered promiscuous mode [ 1827.629305] device geneve0 entered promiscuous mode [ 1827.634857] device geneve1 entered promiscuous mode [ 1827.640283] device bond1 entered promiscuous mode [ 1827.645900] device bridge_slave_1. entered promiscuous mode [ 1827.652022] device bond2 entered promiscuous mode 20:03:26 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:26 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x74}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:26 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000003f20000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000000)={0xfffffffffffffc01, 0x5, 0x1}) 20:03:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x161000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x1, 0x3, 0x8004, 0x38c2, 0x4, 0x10000, 0x9, 0x100, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000140)={r2, @in={{0x2, 0x4e24, @rand_addr=0xf}}}, 0x84) [ 1830.207543] xt_l2tp: v2 tid > 0xffff: 131072 [ 1830.213263] device lo left promiscuous mode 20:03:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5865}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:26 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x7a}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:26 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000002f80000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1830.234561] device tunl0 left promiscuous mode [ 1830.234697] device gre0 left promiscuous mode [ 1830.234827] device gretap0 left promiscuous mode [ 1830.234952] device erspan0 left promiscuous mode [ 1830.235075] device ip_vti0 left promiscuous mode [ 1830.236908] device ip6_vti0 left promiscuous mode [ 1830.237089] device sit0 left promiscuous mode [ 1830.237223] device ip6tnl0 left promiscuous mode [ 1830.237369] device ip6gre0 left promiscuous mode [ 1830.239090] device syz_tun left promiscuous mode [ 1830.239218] device ip6gretap0 left promiscuous mode [ 1830.239360] device bridge0 left promiscuous mode [ 1830.239475] device vcan0 left promiscuous mode [ 1830.239567] device bond0 left promiscuous mode [ 1830.241426] device team0 left promiscuous mode [ 1830.241817] device dummy0 left promiscuous mode [ 1830.249936] device nlmon0 left promiscuous mode [ 1830.250082] device K left promiscuous mode [ 1830.250196] device batadv0 left promiscuous mode [ 1830.251015] device vxcan0 left promiscuous mode [ 1830.251107] device vxcan1 left promiscuous mode [ 1830.251190] device veth0 left promiscuous mode [ 1830.251319] device veth1 left promiscuous mode 20:03:27 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000003fa0000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:27 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x88}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1830.252723] device xfrm0 left promiscuous mode [ 1830.252862] device veth0_to_bridge left promiscuous mode [ 1830.253085] device veth1_to_bridge left promiscuous mode [ 1830.256641] device veth0_to_bond left promiscuous mode [ 1830.256774] device bond_slave_0 left promiscuous mode [ 1830.256913] device veth1_to_bond left promiscuous mode [ 1830.257043] device bond_slave_1 left promiscuous mode [ 1830.257170] device veth0_to_team left promiscuous mode [ 1830.257293] device team_slave_0 left promiscuous mode [ 1830.258248] device veth1_to_team left promiscuous mode [ 1830.258375] device team_slave_1 left promiscuous mode [ 1830.258508] device veth0_to_batadv left promiscuous mode [ 1830.258783] device batadv_slave_0 left promiscuous mode [ 1830.258916] device veth1_to_batadv left promiscuous mode [ 1830.259035] device batadv_slave_1 left promiscuous mode [ 1830.259159] device veth0_to_hsr left promiscuous mode [ 1830.259469] device veth1_to_hsr left promiscuous mode [ 1830.259958] device hsr0 left promiscuous mode [ 1830.260098] device veth1_virt_wifi left promiscuous mode [ 1830.260229] device veth0_virt_wifi left promiscuous mode [ 1830.260685] device vlan0 left promiscuous mode [ 1830.260958] device vlan1 left promiscuous mode [ 1830.261095] device macvlan0 left promiscuous mode [ 1830.261226] device macvlan1 left promiscuous mode [ 1830.261378] device ipvlan0 left promiscuous mode [ 1830.261590] device ipvlan1 left promiscuous mode [ 1830.262182] device macvtap0 left promiscuous mode [ 1830.262314] device macsec0 left promiscuous mode [ 1830.262448] device geneve0 left promiscuous mode [ 1830.262647] device geneve1 left promiscuous mode [ 1830.262794] device bond1 left promiscuous mode [ 1830.262944] device bridge_slave_1. left promiscuous mode [ 1830.263214] device bond2 left promiscuous mode [ 1830.440859] xt_l2tp: v2 tid > 0xffff: 131072 [ 1830.477105] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1830.682640] xt_l2tp: v2 tid > 0xffff: 131072 [ 1830.713898] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1830.760955] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1830.775058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1830.782786] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1830.794547] 8021q: adding VLAN 0 to HW filter on device team0 20:03:27 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0xf0}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1830.848982] A link change request failed with some changes committed already. Interface K may have been left with an inconsistent configuration, please check. [ 1830.953026] xt_l2tp: v2 tid > 0xffff: 131072 20:03:27 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:27 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1500000065ffff01804000"], 0xb) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r8 = socket$inet_udp(0x2, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES32=r1, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRESHEX=r3, @ANYRES64=r0, @ANYBLOB="a68c88509bd12766e8b63448c816f71302423d5eafd9830815d4aec35a7ab13d9d7010ab9f0b1958384324ef702c4043ef2b10a0fedac527f06c036186504ccdfc74382a230e9090caef439bdf813c86c270290b92e6be269a3b9f92135d9aa0736f145b2764aee351b3191b61a9555ca0e1ad728c058fd0d54b9b78ccdf890d8d36b16ac50a9927a4a96435deea2e2a5119c6f8fa1a71a2fcaac91fe4eff81a702caa39c1a276f4b90e2d3ffb94c2817827198cb7d4dfe536ff1f68120e3c778aa279659fbb44804b58fbf173b45603e76beac3c5742f4d4c3b65b138a80397acfb14c445b986f9042467e152002660b174c2b2", @ANYRES32=r5, @ANYRES32, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRES32=r7, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYBLOB="f85a43e1b4df1a3e1441d616c3f9e55688c19059fabcace41f2385307cb041e768d276023f641ea2145993a24738ac080064b3d30e75b4c0de6c1740cec6b08f5ecd77423d9e813dbb275f234c6c9506cdeb5dbc5071a84d2c86bcb8178bc294440e0ebcc864adc2309897422b7cd92a3dbcf7c75e4f2ff71cb4614b50e609b0eec2e0b630472a5199eb9d9f1d3b32b4", @ANYPTR64], @ANYRES32=r8], @ANYRESHEX=r0, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES16, @ANYRESDEC], @ANYBLOB="7d703b610e39b5395efb4006b5466114", @ANYBLOB="dcc27064c13873aa9eaa329a1ce4228d8b020fe2e017b5a5ee44adbda1863364b7cf13030944b956784f"]) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000000040)={0x3}) 20:03:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000440)={0xc3e, 0x9, 0x1, 'queue0\x00', 0xffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000001", @ANYRES16=r2, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564703a73797a310000000044000400080001000a000000f7ffffffff01000000000000000000000000000100000000200002000a00000000000000ff02000000000000000000000000000100000000"], 0x6c}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r2, @ANYBLOB="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"], 0xdc}, 0x1, 0x0, 0x0, 0x4040804}, 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') ioctl$KDGKBMETA(r6, 0x4b62, &(0x7f0000000500)) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r7, 0x300, 0x70bd28, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) prctl$PR_SET_NAME(0xf, &(0x7f0000000080)='TIPC\x00') ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) 20:03:27 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000002fc0000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:27 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x130}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1831.127971] xt_l2tp: v2 tid > 0xffff: 131072 20:03:27 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000080)={0x0, 0x8, 0x100, 0x1, 0x11, 0x1ff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f00000000c0)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000040)={0x3}) 20:03:27 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:27 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x230}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1831.320362] Unknown ioctl 19312 20:03:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = gettid() ustat(0x6, &(0x7f0000000280)) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0xe) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000240)='net/dev_mcast\x00') setreuid(0x0, r2) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x4, &(0x7f0000000140)={'trans=unix,', {[{@mmap='mmap'}, {@uname={'uname', 0x3d, '-trusted'}}, {@aname={'aname', 0x3d, '\\GPL%'}}, {@nodevmap='nodevmap'}, {@cache_mmap='cache=mmap'}, {@access_any='access=any'}, {@access_uid={'access', 0x3d, r2}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise_type='appraise_type=imasig'}, {@hash='hash'}, {@subj_role={'subj_role', 0x3d, 'em1'}}, {@fowner_lt={'fowner<', r5}}, {@context={'context', 0x3d, 'user_u'}}]}}) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x7) [ 1831.351956] Unknown ioctl 19312 [ 1831.387040] xt_l2tp: v2 tid > 0xffff: 131072 20:03:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x7, 0x5, 0x3fb, 0xfff8}}) 20:03:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6558}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1831.542048] device lo entered promiscuous mode 20:03:28 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:28 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x238}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x800, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4c, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7ff, 0xffffffffffffffff}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x40, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x81) 20:03:28 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000001fd0000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x200}}) [ 1831.567280] device tunl0 entered promiscuous mode [ 1831.583584] device gre0 entered promiscuous mode [ 1831.642554] xt_l2tp: v2 tid > 0xffff: 131072 [ 1831.650075] device gretap0 entered promiscuous mode [ 1831.676830] device erspan0 entered promiscuous mode [ 1831.689040] device ip_vti0 entered promiscuous mode [ 1831.698265] device ip6_vti0 entered promiscuous mode [ 1831.703816] device sit0 entered promiscuous mode [ 1831.709816] device ip6tnl0 entered promiscuous mode [ 1831.719575] device ip6gre0 entered promiscuous mode [ 1831.729966] device syz_tun entered promiscuous mode 20:03:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0xdf, 0x207, 0x0, 0x0, 0xf}}) [ 1831.739199] device ip6gretap0 entered promiscuous mode [ 1831.747759] device bridge0 entered promiscuous mode [ 1831.755298] device vcan0 entered promiscuous mode 20:03:28 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x300}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1831.799641] device bond0 entered promiscuous mode 20:03:28 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000001fe0000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1831.825215] device bond_slave_0 entered promiscuous mode [ 1831.831031] device bond_slave_1 entered promiscuous mode [ 1831.842973] device team0 entered promiscuous mode [ 1831.851322] device team_slave_0 entered promiscuous mode [ 1831.857943] device team_slave_1 entered promiscuous mode [ 1831.864603] device dummy0 entered promiscuous mode 20:03:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x9, 0x3f}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000000)={0x4, 0x0, 0x6, 0x2, 0x6, 0x80000000, 0x81}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3}}) [ 1831.871603] device nlmon0 entered promiscuous mode [ 1831.883871] device K entered promiscuous mode [ 1831.891355] xt_l2tp: v2 tid > 0xffff: 131072 [ 1831.899124] device batadv0 entered promiscuous mode [ 1831.911003] device vxcan0 entered promiscuous mode [ 1831.917374] device vxcan1 entered promiscuous mode [ 1831.922626] device veth0 entered promiscuous mode [ 1831.928284] device veth1 entered promiscuous mode [ 1831.941309] device xfrm0 entered promiscuous mode [ 1831.956903] device veth0_to_bridge entered promiscuous mode [ 1831.970959] device veth1_to_bridge entered promiscuous mode [ 1831.982390] device veth0_to_bond entered promiscuous mode [ 1831.989043] device veth1_to_bond entered promiscuous mode [ 1831.998132] device veth0_to_team entered promiscuous mode [ 1832.004570] device veth1_to_team entered promiscuous mode [ 1832.010765] device veth0_to_batadv entered promiscuous mode [ 1832.017620] device batadv_slave_0 entered promiscuous mode 20:03:28 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x500}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, 0x0, 0x48001) accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x41) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x138, 0x15, 0x20, 0x70bd2a, 0x25dfdbfb, {0x1e}, [@INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "b601f5b5a703f3cb03386b2e397f02e2d34f7357ebdb383033115d9c9d0d6a9c2374505ad9462c27c40f9a4a16ffe0edc4bb5fbb0a150ca360884cf4872c3c22bdcf8325011b554eed9592d622c4f101a16dd5ea6befeb2783bd184dd9249a1911d4baaec823fe0f0590e44205a15e6b8e43efea57723287d019035e4762c45228a137d642b481dac2fb09ed07f39ad54a61c76e65d0eba9e39eec0fee10ffd99e3430cb6fdc65da85fee9a57937f3896e4f61108117948c490192cc5b59d43de34ef7e779d9ff1bc8a416075c12da3bb4bc7728805edcafd2521ab959f4ae"}, @INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "bd018e3e80f04de9124f16ff0d0e708204efe1a06947331c7d1c1889d79a48908f958c44f78070eae250de85696593a1975b95f180e7b8571b"}]}, 0x138}, 0x1, 0x0, 0x0, 0x40408c0}, 0x51) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) [ 1832.023707] device veth1_to_batadv entered promiscuous mode [ 1832.035699] device batadv_slave_1 entered promiscuous mode [ 1832.042908] device veth0_to_hsr entered promiscuous mode [ 1832.051401] device veth1_to_hsr entered promiscuous mode [ 1832.067987] device hsr0 entered promiscuous mode [ 1832.079222] device veth1_virt_wifi entered promiscuous mode [ 1832.092843] device veth0_virt_wifi entered promiscuous mode [ 1832.108396] device vlan0 entered promiscuous mode [ 1832.136859] xt_l2tp: v2 tid > 0xffff: 131072 [ 1832.140747] device vlan1 entered promiscuous mode [ 1832.147757] device macvlan0 entered promiscuous mode [ 1832.153644] device macvlan1 entered promiscuous mode [ 1832.160248] device ipvlan0 entered promiscuous mode [ 1832.166582] device ipvlan1 entered promiscuous mode [ 1832.172137] device macvtap0 entered promiscuous mode [ 1832.184561] device macsec0 entered promiscuous mode [ 1832.208285] device geneve0 entered promiscuous mode [ 1832.214895] device geneve1 entered promiscuous mode [ 1832.224393] device bond1 entered promiscuous mode [ 1832.232318] device bridge_slave_1. entered promiscuous mode [ 1832.241486] device bond2 entered promiscuous mode 20:03:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8100}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:31 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xe, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:31 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000ffffffff0000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:31 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x600}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f00000000c0)) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000080)={0xd, 0x58}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @adiantum, 0x3, [], "4814f9e2efc025e813255a4bf9d4f764"}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in=@dev}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) 20:03:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) getpeername$l2tp(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000100)=0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000080)={0x9e0000, 0x4, 0xffff, r7, 0x0, &(0x7f0000000000)={0x9909e1, 0x7, [], @value64=0x4}}) setsockopt$netlink_NETLINK_CAP_ACK(r8, 0x10e, 0xa, &(0x7f00000000c0)=0x3, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4) 20:03:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9711}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1834.827405] xt_l2tp: v2 tid > 0xffff: 131072 [ 1834.861421] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1834.869293] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1834.876722] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1834.886565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1834.895950] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1834.902326] 8021q: adding VLAN 0 to HW filter on device team0 20:03:31 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f7680000000000000000ffffffffffffffff0000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:31 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x700}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1834.954169] A link change request failed with some changes committed already. Interface K may have been left with an inconsistent configuration, please check. 20:03:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) 20:03:31 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x1}}) 20:03:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:31 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000020000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1835.178667] device lo left promiscuous mode [ 1835.206927] device tunl0 left promiscuous mode [ 1835.231666] device gre0 left promiscuous mode [ 1835.282705] device gretap0 left promiscuous mode [ 1835.328166] device erspan0 left promiscuous mode [ 1835.335218] device ip_vti0 left promiscuous mode [ 1835.341360] device ip6_vti0 left promiscuous mode [ 1835.348241] device sit0 left promiscuous mode [ 1835.357122] device ip6tnl0 left promiscuous mode [ 1835.363739] device ip6gre0 left promiscuous mode [ 1835.370760] device syz_tun left promiscuous mode [ 1835.377725] device ip6gretap0 left promiscuous mode [ 1835.385379] device bridge0 left promiscuous mode [ 1835.391297] device vcan0 left promiscuous mode [ 1835.408984] device bond0 left promiscuous mode [ 1835.416056] device team0 left promiscuous mode [ 1835.422220] device dummy0 left promiscuous mode [ 1835.431142] device nlmon0 left promiscuous mode [ 1835.437245] device K left promiscuous mode [ 1835.441746] device batadv0 left promiscuous mode [ 1835.446842] device vxcan0 left promiscuous mode [ 1835.451591] device vxcan1 left promiscuous mode [ 1835.456714] device veth0 left promiscuous mode [ 1835.461413] device veth1 left promiscuous mode [ 1835.466198] device xfrm0 left promiscuous mode [ 1835.470877] device veth0_to_bridge left promiscuous mode [ 1835.476986] device veth1_to_bridge left promiscuous mode [ 1835.482583] device veth0_to_bond left promiscuous mode [ 1835.488271] device bond_slave_0 left promiscuous mode [ 1835.493616] device veth1_to_bond left promiscuous mode [ 1835.499121] device bond_slave_1 left promiscuous mode [ 1835.504493] device veth0_to_team left promiscuous mode [ 1835.509902] device team_slave_0 left promiscuous mode [ 1835.515997] device veth1_to_team left promiscuous mode [ 1835.521400] device team_slave_1 left promiscuous mode [ 1835.526826] device veth0_to_batadv left promiscuous mode [ 1835.532385] device batadv_slave_0 left promiscuous mode [ 1835.537942] device veth1_to_batadv left promiscuous mode [ 1835.543507] device batadv_slave_1 left promiscuous mode [ 1835.549075] device veth0_to_hsr left promiscuous mode [ 1835.554779] device veth1_to_hsr left promiscuous mode [ 1835.560138] device hsr0 left promiscuous mode [ 1835.564833] device veth1_virt_wifi left promiscuous mode [ 1835.570452] device veth0_virt_wifi left promiscuous mode [ 1835.576369] device vlan0 left promiscuous mode [ 1835.581071] device vlan1 left promiscuous mode [ 1835.585895] device macvlan0 left promiscuous mode [ 1835.590909] device macvlan1 left promiscuous mode [ 1835.595970] device ipvlan0 left promiscuous mode [ 1835.600863] device ipvlan1 left promiscuous mode [ 1835.606037] device macvtap0 left promiscuous mode [ 1835.611007] device macsec0 left promiscuous mode [ 1835.616168] device geneve0 left promiscuous mode [ 1835.621021] device geneve1 left promiscuous mode [ 1835.625987] device bond1 left promiscuous mode [ 1835.630695] device bridge_slave_1. left promiscuous mode [ 1835.636366] device bond2 left promiscuous mode 20:03:32 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x48, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000000)) 20:03:32 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0xa00}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:32 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000030000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000000)='virt_wifi0\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xef}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x40) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00@', @ANYRES16=r5, @ANYBLOB="00be64b2d3459633e0d101ac732c8bd229a765ea43c7d455cbfe4046dde56a654b581fba79741d6ccc64ebd429c6d150eedd586abdb98d371e13896b9ab357994737995133b03965472aa08ded6161f5f48a2a91afbafb3b9484fa66b37d8fda87f1f7d1693a5ba623e6e0823c2b92fbda808289effa0cdd79df53c5e1d5c08d7c119ef4f032fb9eefd90612c4d01040c84c0d64d3735bb66fcf8328c2caba38aa563c753cf0da0ad4ab90f5c88537cc1d8ea03abd88970d2a61e5f22eae897c07e16b0dfd069ac80056806724c7949422efb6d309f56127ba16b40c29b76bfd7affb5"], 0x3}}, 0x20000080) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r5, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xcd, 0x4}}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_batadv\x00'}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ipvlan0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8}}]}, 0x78}, 0x1, 0x0, 0x0, 0x24040014}, 0x80) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x101}}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) 20:03:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1835.740326] l2tp_mt_check: 1 callbacks suppressed [ 1835.740333] xt_l2tp: v2 tid > 0xffff: 131072 20:03:32 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x2b) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x0, 0x0, {0xffffffffffffffff, 0x1, 0x3, 0x3, 0x80000001}, 0x5}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r2, 0x4b36) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x3}) [ 1835.802004] device lo entered promiscuous mode [ 1835.828632] device tunl0 entered promiscuous mode [ 1835.869400] device gre0 entered promiscuous mode 20:03:32 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000040000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x80, 0xea}}) [ 1835.896617] device gretap0 entered promiscuous mode 20:03:32 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x1100}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:32 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78000001, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10b040, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {}, {0x20, 0x17, {0x5, 0x0, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}}}, ["", "", "", ""]}, 0x3c}}, 0x20000000) mq_timedreceive(r2, &(0x7f0000000080)=""/229, 0xe5, 0x5, &(0x7f0000000180)={0x0, 0x1c9c380}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x3, 0x0, 0xf}}) [ 1835.921588] device erspan0 entered promiscuous mode [ 1835.985679] device ip_vti0 entered promiscuous mode 20:03:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0xb075, 0x0, 0x0, 0x40, 0x2}}) [ 1836.024566] xt_l2tp: v2 tid > 0xffff: 131072 [ 1836.034321] device ip6_vti0 entered promiscuous mode [ 1836.057914] device sit0 entered promiscuous mode [ 1836.112022] device ip6tnl0 entered promiscuous mode [ 1836.151144] device ip6gre0 entered promiscuous mode [ 1836.202439] device syz_tun entered promiscuous mode [ 1836.210115] device ip6gretap0 entered promiscuous mode [ 1836.219652] device bridge0 entered promiscuous mode [ 1836.231099] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1836.238197] device vcan0 entered promiscuous mode [ 1836.244074] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1836.250970] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1836.258391] device bond0 entered promiscuous mode [ 1836.263300] device bond_slave_0 entered promiscuous mode [ 1836.269002] device bond_slave_1 entered promiscuous mode [ 1836.276308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1836.283048] device team0 entered promiscuous mode [ 1836.287989] device team_slave_0 entered promiscuous mode [ 1836.293571] device team_slave_1 entered promiscuous mode [ 1836.300069] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1836.306232] 8021q: adding VLAN 0 to HW filter on device team0 [ 1836.312896] device dummy0 entered promiscuous mode [ 1836.319522] device nlmon0 entered promiscuous mode [ 1836.374173] device K entered promiscuous mode [ 1836.379550] A link change request failed with some changes committed already. Interface K may have been left with an inconsistent configuration, please check. 20:03:35 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4c, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x800, 0x100, 0x6d, 0x0, 0x1}}) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$alg(r1, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@dev, @mcast1, @rand_addr="657261c70996f4e1596272e2ec4688fa", 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c204c6, r5}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000440)={@remote, @rand_addr="68d4b41238c2d4e5ea6c98bd38e42eb2", @loopback, 0x0, 0x20, 0xff, 0x100, 0x0, 0xfa6bd12bfffd48c2, r5}) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x1, 0x6, 0x101, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 20:03:35 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x2000}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:35 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000050000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) 20:03:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1838.874448] device lo left promiscuous mode [ 1838.886604] xt_l2tp: v2 tid > 0xffff: 131072 [ 1838.891136] device tunl0 left promiscuous mode [ 1838.913737] device gre0 left promiscuous mode [ 1838.948727] device gretap0 left promiscuous mode [ 1838.972418] device erspan0 left promiscuous mode 20:03:35 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x3001}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:35 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000060000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1839.004733] device ip_vti0 left promiscuous mode [ 1839.018245] device ip6_vti0 left promiscuous mode [ 1839.042398] device sit0 left promiscuous mode [ 1839.074107] device ip6tnl0 left promiscuous mode [ 1839.093580] xt_l2tp: v2 tid > 0xffff: 131072 [ 1839.100135] device ip6gre0 left promiscuous mode [ 1839.122999] device syz_tun left promiscuous mode [ 1839.143227] device ip6gretap0 left promiscuous mode [ 1839.179957] device bridge0 left promiscuous mode 20:03:35 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x3002}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:35 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000070000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1839.218189] device vcan0 left promiscuous mode [ 1839.269337] device bond0 left promiscuous mode [ 1839.288420] xt_l2tp: v2 tid > 0xffff: 131072 [ 1839.299766] device bond_slave_0 left promiscuous mode [ 1839.320607] device bond_slave_1 left promiscuous mode [ 1839.336371] device team0 left promiscuous mode [ 1839.343400] device team_slave_0 left promiscuous mode [ 1839.361093] device team_slave_1 left promiscuous mode [ 1839.402087] device dummy0 left promiscuous mode 20:03:35 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x3802}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1839.449677] device nlmon0 left promiscuous mode 20:03:35 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f7680000000000000000000c0000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1839.493491] device K left promiscuous mode [ 1839.520997] xt_l2tp: v2 tid > 0xffff: 131072 20:03:36 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x68, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:36 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x112902, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) recvfrom$packet(r0, &(0x7f00000000c0)=""/75, 0x4b, 0x10140, &(0x7f00000001c0)={0x11, 0x719514eb0b6b799c, r1, 0x1, 0x3, 0x6, @broadcast}, 0x14) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x3}) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000000)="aa814e3d23d324d7ade08c62ff5ced8ba67f212af1b65a305a8f45a280be5bbafdf9bd7c1c5aec3893528c6f117e94695e39aef7d19942cc847c541660") 20:03:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:36 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x4000}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:36 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000110000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1839.865836] xt_l2tp: v2 tid > 0xffff: 131072 20:03:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0xa, &(0x7f0000000080)=[{0x7ff, 0x8, 0x2c, 0x1fffe0}, {0x401, 0x2, 0x8e, 0x4}, {0x2, 0xf8, 0xf4, 0x50}, {0x8, 0x4, 0xfb, 0xcee}, {0x0, 0x7, 0x5, 0x9}, {0x3, 0x1, 0x17, 0x9}, {0x8, 0x2, 0x0, 0x3}, {0x7, 0x7, 0x20, 0x6f}, {0x100, 0x0, 0x8, 0x80}, {0x2, 0x1f, 0x0, 0x7f}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r2 = dup(r1) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000140)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x48, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) 20:03:36 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000120000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:36 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x4800}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1840.136106] xt_l2tp: v2 tid > 0xffff: 131072 20:03:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:36 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000140000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:36 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6c, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:36 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x4c00}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1840.442060] xt_l2tp: v2 tid > 0xffff: 131072 20:03:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:37 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000180000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:37 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x6000}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1840.649496] xt_l2tp: v2 tid > 0xffff: 131072 20:03:37 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f7680000000000000000001a0000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:37 executing program 2: r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, 0x0, 0x48001) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x41) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x6, "6b8b8f"}, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r2, &(0x7f0000002000/0x4000)=nil, 0x6000) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000180)=""/146) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x3}) 20:03:37 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x6800}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:37 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x74, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) [ 1840.982789] xt_l2tp: v2 tid > 0xffff: 131072 20:03:37 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f7680000000000000000001d0000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:37 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x8000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x400, 0x1000, 0x2, 0x4}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x4e21, 0x5251e048, @dev={0xfe, 0x80, [], 0x16}, 0x3}}}, 0x88) 20:03:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:37 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x6c00}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:37 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x900) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240), 0x4) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000200)=0x401, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x7, 0xfffc, 0x1}}) mq_unlink(&(0x7f0000000080)=',@\x00') getpeername$tipc(r0, &(0x7f00000000c0)=@id, &(0x7f0000000280)=0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000001c0)={'geneve0\x00', {0x2, 0x4e21, @multicast1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000140)) 20:03:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1841.228607] xt_l2tp: v2 tid > 0xffff: 131072 20:03:37 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000230000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:37 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7a, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r4 = fcntl$dupfd(r1, 0x0, r2) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000000)) 20:03:37 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x7400}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 20:03:38 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000260000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1841.566866] xt_l2tp: v2 tid > 0xffff: 131072 20:03:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:38 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x7a00}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x595b0ecb8d08bc64) ioctl$KVM_NMI(r2, 0xae9a) 20:03:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1841.838310] xt_l2tp: v2 tid > 0xffff: 131072 20:03:38 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f7680000000000000000002f0000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mISDNtimer\x00', 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r3, r4) ioctl$TUNSETNOCSUM(r7, 0x80044941, 0x760000) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000100)={0xf000000, 0x8, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9c0905, 0x10000, [], @value=0x3}}) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$TIOCGSOFTCAR(r9, 0x5419, &(0x7f0000000200)) 20:03:38 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd8, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:38 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x8800}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/113}) [ 1842.084138] xt_l2tp: v2 tid > 0xffff: 131072 20:03:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65580000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:38 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000300000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:38 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0xf000}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x41cf80, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, 0x0, 0x48001) accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x41) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x2, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x40844) [ 1842.305793] xt_l2tp: v2 tid > 0xffff: 131072 20:03:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x81000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:38 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:38 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000530000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1842.475037] xt_l2tp: v2 tid > 0xffff: 131072 20:03:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1842.623884] device lo entered promiscuous mode [ 1842.662014] device tunl0 entered promiscuous mode [ 1842.675664] device gre0 entered promiscuous mode [ 1842.682029] device gretap0 entered promiscuous mode [ 1842.709465] device erspan0 entered promiscuous mode [ 1842.719184] device ip_vti0 entered promiscuous mode [ 1842.731471] device ip6_vti0 entered promiscuous mode [ 1842.740154] device sit0 entered promiscuous mode [ 1842.755403] device ip6tnl0 entered promiscuous mode [ 1842.762387] device ip6gre0 entered promiscuous mode [ 1842.775537] device syz_tun entered promiscuous mode [ 1842.782757] device ip6gretap0 entered promiscuous mode [ 1842.795848] device bridge0 entered promiscuous mode [ 1842.801833] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1842.814311] device vcan0 entered promiscuous mode [ 1842.820085] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1842.832340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1842.839693] device bond0 entered promiscuous mode [ 1842.849905] device bond_slave_0 entered promiscuous mode [ 1842.856225] device bond_slave_1 entered promiscuous mode [ 1842.863570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1842.876103] device team0 entered promiscuous mode [ 1842.881010] device team_slave_0 entered promiscuous mode [ 1842.890538] device team_slave_1 entered promiscuous mode [ 1842.899244] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1842.909810] 8021q: adding VLAN 0 to HW filter on device team0 [ 1842.918946] device dummy0 entered promiscuous mode [ 1842.929512] device nlmon0 entered promiscuous mode [ 1842.984137] device K entered promiscuous mode [ 1842.990094] A link change request failed with some changes committed already. Interface K may have been left with an inconsistent configuration, please check. 20:03:41 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x300, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000640)=""/226) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000240)={0x35c, r5, 0x4, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5dfb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7bf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x290}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff7f}]}, @TIPC_NLA_BEARER={0x194, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_batadv\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x280}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xec4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3ff, @rand_addr="6960cf6a31c6f3191fa54e2f04fe4cf6", 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x8}}}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb9a8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff9a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8b09}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffeff}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x8001}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x5}}}}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x35c}, 0x1, 0x0, 0x0, 0x10}, 0x48800) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, r8, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xef}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x40) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00@', @ANYRES16=r7, @ANYBLOB="00be64b2d3459633e0d101ac732c8bd229a765ea43c7d455cbfe4046dde56a654b581fba79741d6ccc64ebd429c6d150eedd586abdb98d371e13896b9ab357994737995133b03965472aa08ded6161f5f48a2a91afbafb3b9484fa66b37d8fda87f1f7d1693a5ba623e6e0823c2b92fbda808289effa0cdd79df53c5e1d5c08d7c119ef4f032fb9eefd90612c4d01040c84c0d64d3735bb66fcf8328c2caba38aa563c753cf0da0ad4ab90f5c88537cc1d8ea03abd88970d2a61e5f22eae897c07e16b0dfd069ac80056806724c7949422efb6d309f56127ba16b40c29b76bfd7affb5"], 0x3}}, 0x20000080) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r7, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xcd, 0x4}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_batadv\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ipvlan0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8}}]}, 0x78}, 0x1, 0x0, 0x0, 0x24040014}, 0x80) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r7, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x11}, 0x800) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000080)={0x0, "01f79a16f3ac2a22e84d7087df61011f23af129e0183cf0016a2ba599a42caf948aed9c5ec8633ed7eb75bbdad21c0634a48e1f2b3560553c9396739aa6f436a", {0x20, 0x6}}) 20:03:41 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x2]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:41 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000640000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x97110000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000200)={0x0, @tick=0x101, 0x4, {0x7f, 0x3}, 0xa5, 0x1, 0x54}) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) [ 1845.151375] xt_l2tp: v2 tid > 0xffff: 131072 [ 1845.154529] device lo left promiscuous mode [ 1845.183802] device tunl0 left promiscuous mode 20:03:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, 0x0, 0x48001) accept4$alg(r2, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x41) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000240)=""/223, 0xdf}, &(0x7f0000000180)}, 0x20) r3 = dup(r1) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000000)={0x400, "2b884a6a0cfbe201dab9c120bf8c8b6835d591ece7a21ecaf6e88bd7315c1d00", 0x2, 0x1}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) [ 1845.200871] device gre0 left promiscuous mode [ 1845.227850] device gretap0 left promiscuous mode 20:03:41 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x3]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1845.260573] device erspan0 left promiscuous mode 20:03:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f0000000080)={0x20, 0x0, 0x3010, 0x8001, 0x6, {0xfff, 0x2f081d2a}, 0x1}) r5 = fcntl$dupfd(r2, 0x0, r2) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000140)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmmsg(r7, &(0x7f0000000180), 0x40000000000003f, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) getsockopt$sock_buf(r8, 0x1, 0x0, &(0x7f0000000200)=""/43, &(0x7f0000000240)=0x2b) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) [ 1845.291934] device ip_vti0 left promiscuous mode [ 1845.332496] device ip6_vti0 left promiscuous mode 20:03:41 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f7680000000000000000006e0000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1845.359734] xt_l2tp: v2 tid > 0xffff: 131072 [ 1845.375103] device sit0 left promiscuous mode 20:03:41 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x4]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1845.400214] device ip6tnl0 left promiscuous mode [ 1845.407102] device ip6gre0 left promiscuous mode [ 1845.413828] device syz_tun left promiscuous mode [ 1845.427780] device ip6gretap0 left promiscuous mode [ 1845.447727] device bridge0 left promiscuous mode [ 1845.469584] device vcan0 left promiscuous mode [ 1845.497342] device bond0 left promiscuous mode [ 1845.502592] device bond_slave_0 left promiscuous mode [ 1845.506120] xt_l2tp: v2 tid > 0xffff: 131072 [ 1845.509534] device bond_slave_1 left promiscuous mode [ 1845.520507] device team0 left promiscuous mode [ 1845.526121] device team_slave_0 left promiscuous mode [ 1845.531658] device team_slave_1 left promiscuous mode [ 1845.538912] device dummy0 left promiscuous mode 20:03:42 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000780000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1845.546409] device nlmon0 left promiscuous mode [ 1845.552178] device K left promiscuous mode 20:03:42 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x500, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xe) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x2001, 0xd1) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xff, 0x40, 0x7, 0x5, 0x0, 0x800, 0x80000, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x2c, 0x96}, 0x40a1, 0x61, 0x6, 0x6, 0x7, 0xffff424c, 0x200}, r1, 0x9, r2, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000100)={0x2, "31eb9c2f08dd370a8a1b151df3ac9c87fb13522e7d25d050570c6df70a9db681", 0x3, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$KDSKBLED(r4, 0x4b65, 0x7ff) 20:03:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) dup(r1) 20:03:42 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x5]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:42 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000880000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1845.828199] device lo entered promiscuous mode [ 1845.870502] device tunl0 entered promiscuous mode [ 1845.883203] device gre0 entered promiscuous mode 20:03:42 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000980000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1845.920050] device gretap0 entered promiscuous mode 20:03:42 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x6]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:42 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) getpeername$llc(r1, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000140)=0x10) r2 = dup(r0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000000c0)="b9a3222860191101396bed97f2f9f945c4ed76fb25", 0x15) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x115000, 0x0) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x7fff, 0x0, 0xf}}) [ 1845.951834] device erspan0 entered promiscuous mode 20:03:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0xfffc}}) prctl$PR_SET_ENDIAN(0x14, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101200, 0x0) ioctl$TCXONC(r1, 0x540a, 0x5) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd0, r4, 0x8, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x8880) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0xe) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xac, r4, 0x800, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8c041}, 0x1) 20:03:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r4 = fcntl$dupfd(r1, 0x0, r2) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000000)) [ 1846.038481] device ip_vti0 entered promiscuous mode [ 1846.058579] device ip6_vti0 entered promiscuous mode [ 1846.067111] l2tp_mt_check: 1 callbacks suppressed [ 1846.067118] xt_l2tp: v2 tid > 0xffff: 131072 [ 1846.083438] device sit0 entered promiscuous mode [ 1846.119530] device ip6tnl0 entered promiscuous mode 20:03:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x2, 0x0, 0x6}}) [ 1846.149664] device ip6gre0 entered promiscuous mode [ 1846.190013] device syz_tun entered promiscuous mode [ 1846.216545] device ip6gretap0 entered promiscuous mode [ 1846.231523] device bridge0 entered promiscuous mode [ 1846.245119] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1846.252466] device vcan0 entered promiscuous mode [ 1846.268712] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1846.295126] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1846.303137] device bond0 entered promiscuous mode [ 1846.308923] device bond_slave_0 entered promiscuous mode [ 1846.315081] device bond_slave_1 entered promiscuous mode [ 1846.322621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1846.330049] device team0 entered promiscuous mode [ 1846.335378] device team_slave_0 entered promiscuous mode [ 1846.340928] device team_slave_1 entered promiscuous mode [ 1846.347641] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1846.353716] 8021q: adding VLAN 0 to HW filter on device team0 [ 1846.360746] device dummy0 entered promiscuous mode [ 1846.367137] device nlmon0 entered promiscuous mode [ 1846.404102] device K entered promiscuous mode [ 1846.408925] A link change request failed with some changes committed already. Interface K may have been left with an inconsistent configuration, please check. 20:03:45 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x600, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:45 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x7]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:45 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000c10000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) 20:03:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc3ffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r4 = fcntl$dupfd(r1, 0x0, r2) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000000)) [ 1848.942257] xt_l2tp: v2 tid > 0xffff: 131072 20:03:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r4 = fcntl$dupfd(r1, 0x0, r2) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000000)) [ 1848.988328] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:03:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000340)={r3, 0x0, 0xffff, 0x0, 0xff, 0x1000, 0x3ff, 0xfff, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x6, 0xfffd, 0xffff7738, 0x8}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x7}, &(0x7f0000000100)=0x8) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1500000065ffff01804000"], 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) write$P9_RWALK(r5, &(0x7f00000000c0)={0xa3, 0x6f, 0x2, {0x0, [{0x2, 0x1, 0x8}, {0x20, 0x2}, {0x0, 0x3, 0x8}]}}, 0x9) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x10040, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x4d, 0x8, 0x3, 0x7, 0x2}}) [ 1849.045133] A link change request failed with some changes committed already. Interface K may have been left with an inconsistent configuration, please check. 20:03:45 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0xa]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:45 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000e00000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) [ 1849.230497] xt_l2tp: v2 tid > 0xffff: 131072 [ 1849.280817] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:03:45 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x700, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000100)=0xa44, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3, 0x105a01) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000000)) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000200)={0xce89, 0x6, 0xc7d, 0x5, 0x7e}) 20:03:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x391081, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000280)={@remote}, 0x14) [ 1849.335076] A link change request failed with some changes committed already. Interface K may have been left with an inconsistent configuration, please check. 20:03:45 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x11]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:45 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f7680000000000000000000a0100000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0xc}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f00000000c0)=""/97, &(0x7f0000000140)=0x61) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x100}}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000080)) [ 1849.580563] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1849.590091] xt_l2tp: v2 tid > 0xffff: 131072 20:03:46 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000400100000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1849.675156] A link change request failed with some changes committed already. Interface K may have been left with an inconsistent configuration, please check. 20:03:46 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x48]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1849.723407] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:03:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffa888}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1849.798427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1849.814632] xt_l2tp: v2 tid > 0xffff: 131072 [ 1849.838512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 20:03:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="1500000065ffff01804000"], 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646ef89c36a5e621f83d34f252eac46f3d", @ANYRESHEX=r2]) write$P9_RRENAMEAT(r2, &(0x7f0000000000)={0x7, 0x4b, 0x2}, 0x7) [ 1849.892291] device lo left promiscuous mode [ 1849.920596] device tunl0 left promiscuous mode [ 1849.959362] device gre0 left promiscuous mode [ 1849.974891] device gretap0 left promiscuous mode [ 1850.002987] device erspan0 left promiscuous mode [ 1850.067502] device ip_vti0 left promiscuous mode [ 1850.078606] device ip6_vti0 left promiscuous mode [ 1850.086244] device sit0 left promiscuous mode [ 1850.100787] device ip6tnl0 left promiscuous mode [ 1850.107857] device ip6gre0 left promiscuous mode [ 1850.114881] device syz_tun left promiscuous mode [ 1850.120888] device ip6gretap0 left promiscuous mode [ 1850.128193] device bridge0 left promiscuous mode [ 1850.133811] device vcan0 left promiscuous mode [ 1850.139404] device bond0 left promiscuous mode [ 1850.144412] device bond_slave_0 left promiscuous mode [ 1850.149719] device bond_slave_1 left promiscuous mode [ 1850.156854] device team0 left promiscuous mode [ 1850.161458] device team_slave_0 left promiscuous mode [ 1850.166982] device team_slave_1 left promiscuous mode [ 1850.173243] device dummy0 left promiscuous mode [ 1850.179944] device nlmon0 left promiscuous mode [ 1850.185632] device K left promiscuous mode 20:03:46 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa00, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:46 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000500100000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:46 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x4c]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000002180)={0x4, 0xfffd, 0x3, 0xfffb, 0x6, "3eb41f6d62fdc966"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000002240)={0x9000201a}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)={0x1, 0x4, 0x4, 0x0, 0x5, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0xfa, 0x81, 0x71, "5749156d"}, 0x6, 0x2, @planes=&(0x7f0000000000)={0x9, 0x8, @userptr=0x7d, 0x6}, 0x3, 0x0, 0xffffffffffffffff}) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000100)={{0x3, 0x0, 0x80, {0x1, 0x3000, 0x3}}, "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", "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"}) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000002200)=&(0x7f00000021c0)) 20:03:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x4f00}}) 20:03:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffff000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x3e00}}) [ 1850.388649] xt_l2tp: v2 tid > 0xffff: 131072 20:03:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff7f}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:46 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x60]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:46 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x700, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:46 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000700100000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$TIOCNOTTY(r2, 0x5422) [ 1850.562345] device lo entered promiscuous mode [ 1850.616616] device tunl0 entered promiscuous mode [ 1850.649590] device gre0 entered promiscuous mode [ 1850.666973] xt_l2tp: v2 tid > 0xffff: 131072 [ 1850.673149] device gretap0 entered promiscuous mode [ 1850.681333] device erspan0 entered promiscuous mode [ 1850.693669] device ip_vti0 entered promiscuous mode [ 1850.701659] device ip6_vti0 entered promiscuous mode [ 1850.713344] device sit0 entered promiscuous mode [ 1850.729326] device ip6tnl0 entered promiscuous mode [ 1850.741020] device ip6gre0 entered promiscuous mode [ 1850.756367] device syz_tun entered promiscuous mode [ 1850.768618] device ip6gretap0 entered promiscuous mode [ 1850.797674] device bridge0 entered promiscuous mode [ 1850.822793] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1850.834598] device vcan0 entered promiscuous mode [ 1850.841175] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1850.853404] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1850.860584] device bond0 entered promiscuous mode [ 1850.865760] device bond_slave_0 entered promiscuous mode [ 1850.871614] device bond_slave_1 entered promiscuous mode [ 1850.879365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1850.887448] device team0 entered promiscuous mode [ 1850.892430] device team_slave_0 entered promiscuous mode [ 1850.898736] device team_slave_1 entered promiscuous mode [ 1850.905484] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1850.911710] 8021q: adding VLAN 0 to HW filter on device team0 [ 1850.918583] device dummy0 entered promiscuous mode [ 1850.925466] device nlmon0 entered promiscuous mode [ 1850.974080] device K entered promiscuous mode [ 1850.978846] A link change request failed with some changes committed already. Interface K may have been left with an inconsistent configuration, please check. 20:03:49 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xe00, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:49 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000d40100000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:49 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x68]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x20003) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000080), &(0x7f0000000080)) 20:03:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff9e}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:49 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x30020000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:49 executing program 2 (fault-call:2 fault-nth:0): r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0xfd18) [ 1853.494963] xt_l2tp: v2 tid > 0xffff: 131072 [ 1853.502145] xt_l2tp: v2 tid > 0xffff: 131072 20:03:50 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x6c]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:50 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000e40100000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1853.643519] device batadv0 entered promiscuous mode [ 1853.658609] device vxcan0 entered promiscuous mode [ 1853.669158] xt_l2tp: v2 tid > 0xffff: 131072 [ 1853.674467] device vxcan1 entered promiscuous mode [ 1853.680802] device veth0 entered promiscuous mode [ 1853.693349] device veth1 entered promiscuous mode [ 1853.706357] device xfrm0 entered promiscuous mode [ 1853.711523] device veth0_to_bridge entered promiscuous mode [ 1853.719854] device veth1_to_bridge entered promiscuous mode [ 1853.729647] device veth0_to_bond entered promiscuous mode [ 1853.737771] device veth1_to_bond entered promiscuous mode 20:03:50 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0xfd18) [ 1853.753789] device veth0_to_team entered promiscuous mode [ 1853.762560] device veth1_to_team entered promiscuous mode [ 1853.787385] device veth0_to_batadv entered promiscuous mode 20:03:50 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x74]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1853.802095] device batadv_slave_0 entered promiscuous mode 20:03:50 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000ef0100000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1853.824793] device veth1_to_batadv entered promiscuous mode [ 1853.838943] device batadv_slave_1 entered promiscuous mode [ 1853.853138] device veth0_to_hsr entered promiscuous mode [ 1853.859899] xt_l2tp: v2 tid > 0xffff: 131072 [ 1853.866147] device veth1_to_hsr entered promiscuous mode [ 1853.885947] device hsr0 entered promiscuous mode [ 1853.896777] device veth1_virt_wifi entered promiscuous mode [ 1853.903536] device veth0_virt_wifi entered promiscuous mode [ 1853.910266] device vlan0 entered promiscuous mode [ 1853.919337] device vlan1 entered promiscuous mode [ 1853.930352] device macvlan0 entered promiscuous mode [ 1853.951256] device macvlan1 entered promiscuous mode [ 1853.960365] device ipvlan0 entered promiscuous mode [ 1854.001719] device ipvlan1 entered promiscuous mode [ 1854.008079] device macvtap0 entered promiscuous mode [ 1854.029761] device macsec0 entered promiscuous mode [ 1854.044813] device geneve0 entered promiscuous mode [ 1854.056315] device geneve1 entered promiscuous mode [ 1854.065968] device bond1 entered promiscuous mode [ 1854.071243] device bridge_slave_1. entered promiscuous mode [ 1854.077382] device bond2 entered promiscuous mode 20:03:53 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xeba, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:53 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x18) 20:03:53 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x7a]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) 20:03:53 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000f00100000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffc3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) [ 1856.615750] xt_l2tp: v2 tid > 0xffff: 131072 20:03:53 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x88]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:53 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000fd0100000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1856.721414] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1856.732715] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1856.743547] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1856.761505] 8021q: adding VLAN 0 to HW filter on device bond0 20:03:53 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x30) [ 1856.794815] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1856.838345] 8021q: adding VLAN 0 to HW filter on device team0 [ 1856.867335] xt_l2tp: v2 tid > 0xffff: 131072 20:03:53 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x480642, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) [ 1856.894629] A link change request failed with some changes committed already. Interface K may have been left with an inconsistent configuration, please check. 20:03:53 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0xf0]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1857.051451] xt_l2tp: v2 tid > 0xffff: 131072 20:03:53 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1f00, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:53 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000fe0100000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffff0}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:53 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x48) 20:03:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0xfffc, 0x1, 0x0, 0x0, 0x4}}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x7fff, 0x400, 0x81, 0x9}, 'syz1\x00', 0x13}) 20:03:53 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x130]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1857.237042] xt_l2tp: v2 tid > 0xffff: 131072 20:03:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x2}}) 20:03:53 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x230]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:53 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000040200000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:53 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x60) 20:03:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:53 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x3, {0x2, 0xfffe, 0x0, 0x1, 0x0, 0x1}}) [ 1857.475472] xt_l2tp: v2 tid > 0xffff: 131072 20:03:54 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:54 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x238]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:54 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000600200000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:54 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x78) [ 1857.726258] xt_l2tp: v2 tid > 0xffff: 131072 20:03:54 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) r5 = getegid() r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000440)={@remote, @rand_addr="68d4b41238c2d4e5ea6c98bd38e42eb2", @loopback, 0x0, 0x20, 0xff, 0x100, 0x0, 0xfa6bd12bfffd48c2}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x6}, @mss={0x2, 0x599}, @mss={0x2, 0x2}, @mss={0x2, 0x7f}, @timestamp, @timestamp, @mss={0x2, 0x7f}, @timestamp, @timestamp, @sack_perm], 0xa) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x40, &(0x7f0000000780)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x2000}}, {@default_permissions='default_permissions'}], [{@smackfshat={'smackfshat', 0x3d, '\xa2m(%\xcc\xbd\xfc\xf5*(\xaaUL\xe0\xae\x13\x1e\x15\x06P\x14\x12\x9a\xd3I\xea\xf3K0\x88z\x1b7\xcd\xc4=X\xb6\xe7u\xbd\xd2\'\x1fh|\"!o\xf1\x8f\x14\xf8m\xf5\x00~W\xef\x85\xac\xf1/\xbaS\xf8\x99\v\xadg\xf8\xcb\n\xce\xee\x149o\xc8\xff\x1d\b\\wy\x12/P\xea\xdc,\xd0\xd3\xe5\xf5\x8a\xf5d\xd7\xb6\x82\xae\x14\x80\x9c\x88\xad!\xbf7w\x1a{M\x85&\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=\xe9+\xe1\xd5\xa4V\xde_\xb2\t\xcb\x15g\xc2\x8e\x1f`\xc8\xb5\x03\xbd\xc1\xf6+?O\xbd\xf4U\xd9\x92\x0f\x1eX\xf8\xb6\xf9^\xc7\xc3E\xe8\xef_\xe2\x8f|*\xf4\xd3v\x12\x1f\xbd\xd6\xb0\xee\xdc;\xa4\xc6\xc3\xf8\x11\x01ED\xc9\x00}\xd8\xf2\xdex3\xed\xf9\xb6\xa2\xe3\x11:\xa5\xe32\xd71\x9c\xc2\xaa\xb0\xf2\xf7P'}}, {@subj_type={'subj_type', 0x3d, 'system!ppp0vmnet0V'}}, {@dont_appraise='dont_appraise'}, {@euid_lt={'euid<', r7}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@uid_gt={'uid>', r9}}, {@euid_eq={'euid', 0x3d, r10}}, {@pcr={'pcr', 0x3d, 0x1d}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_eq={'fowner', 0x3d, r10}}]}}) fcntl$getflags(r0, 0x40a) 20:03:54 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000900200000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1857.860778] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1857.893739] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:03:54 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x300]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1857.911886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1857.941852] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1857.957418] 8021q: adding VLAN 0 to HW filter on device team0 20:03:54 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x90) [ 1858.025161] A link change request failed with some changes committed already. Interface K may have been left with an inconsistent configuration, please check. 20:03:54 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x500]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:54 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000d00200000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:54 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3f00, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r4, 0x401, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x8}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000051) r5 = syz_open_dev$audion(&(0x7f0000000600)='/dev/audio#\x00', 0x80, 0x1c882) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000640)={{0x2, 0x4e22, @rand_addr=0x5}, {0x0, @random="b3384a4e6b03"}, 0x4, {0x2, 0x4e21, @multicast1}, 'syz_tun\x00'}) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) socket(0x2d, 0xa, 0x6) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000000140)) 20:03:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1858.227946] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:03:54 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x600]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:54 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0xa8) [ 1858.339882] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1858.387820] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:03:54 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000e80200000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) flistxattr(r2, &(0x7f0000000200)=""/252, 0xfc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x7, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000010}, 0x24004004) 20:03:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x700]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:55 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0xc0) [ 1858.632013] l2tp_mt_check: 3 callbacks suppressed [ 1858.632021] xt_l2tp: v2 tid > 0xffff: 131072 20:03:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, 0x0, 0x48001) accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x41) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe15}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x40011}, 0xc010) modify_ldt$write2(0x11, &(0x7f0000000000)={0x9, 0x0, 0x400, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) 20:03:55 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000f80200000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:57 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4000, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:03:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0xa00]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:57 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0xd8) 20:03:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r1, 0x1, 0x39, 0x0, &(0x7f0000000240)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x801, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000080)={0x10, 0xd8, 0x5c}) 20:03:57 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:03:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1861.459014] xt_l2tp: v2 tid > 0xffff: 131072 [ 1861.466691] audit: type=1400 audit(1584475437.904:88): avc: denied { getopt } for pid=12523 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 20:03:58 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0xf0) 20:03:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:03:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r4, 0x401, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x8}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000051) r5 = syz_open_dev$audion(&(0x7f0000000600)='/dev/audio#\x00', 0x80, 0x1c882) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000640)={{0x2, 0x4e22, @rand_addr=0x5}, {0x0, @random="b3384a4e6b03"}, 0x4, {0x2, 0x4e21, @multicast1}, 'syz_tun\x00'}) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) socket(0x2d, 0xa, 0x6) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000000140)) 20:03:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x1100]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:03:58 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000300000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1861.769094] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1861.787172] xt_l2tp: v2 tid > 0xffff: 131072 20:04:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r4, 0x401, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x8}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000051) r5 = syz_open_dev$audion(&(0x7f0000000600)='/dev/audio#\x00', 0x80, 0x1c882) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000640)={{0x2, 0x4e22, @rand_addr=0x5}, {0x0, @random="b3384a4e6b03"}, 0x4, {0x2, 0x4e21, @multicast1}, 'syz_tun\x00'}) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) socket(0x2d, 0xa, 0x6) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000000140)) 20:04:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:01 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x2000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:01 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x108) 20:04:01 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4800, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:01 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000420300000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1864.610545] xt_l2tp: v2 tid > 0xffff: 131072 20:04:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1864.653210] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 20:04:01 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x3001]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r4, 0x401, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x8}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000051) r5 = syz_open_dev$audion(&(0x7f0000000600)='/dev/audio#\x00', 0x80, 0x1c882) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000640)={{0x2, 0x4e22, @rand_addr=0x5}, {0x0, @random="b3384a4e6b03"}, 0x4, {0x2, 0x4e21, @multicast1}, 'syz_tun\x00'}) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) socket(0x2d, 0xa, 0x6) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000000140)) 20:04:01 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000440300000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:01 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x120) [ 1864.812674] xt_l2tp: v2 tid > 0xffff: 131072 20:04:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1864.894878] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 20:04:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r4, 0x401, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x8}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000051) r5 = syz_open_dev$audion(&(0x7f0000000600)='/dev/audio#\x00', 0x80, 0x1c882) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000640)={{0x2, 0x4e22, @rand_addr=0x5}, {0x0, @random="b3384a4e6b03"}, 0x4, {0x2, 0x4e21, @multicast1}, 'syz_tun\x00'}) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) socket(0x2d, 0xa, 0x6) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) 20:04:01 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x3002]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1865.085159] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1865.107235] xt_l2tp: v2 tid > 0xffff: 131072 20:04:04 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4c00, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:04 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000620300000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:04 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x138) 20:04:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r4, 0x401, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x8}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000051) r5 = syz_open_dev$audion(&(0x7f0000000600)='/dev/audio#\x00', 0x80, 0x1c882) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000640)={{0x2, 0x4e22, @rand_addr=0x5}, {0x0, @random="b3384a4e6b03"}, 0x4, {0x2, 0x4e21, @multicast1}, 'syz_tun\x00'}) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) socket(0x2d, 0xa, 0x6) 20:04:04 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x3802]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1867.766416] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1867.767700] xt_l2tp: v2 tid > 0xffff: 131072 20:04:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r4, 0x401, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x8}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000051) r5 = syz_open_dev$audion(&(0x7f0000000600)='/dev/audio#\x00', 0x80, 0x1c882) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000640)={{0x2, 0x4e22, @rand_addr=0x5}, {0x0, @random="b3384a4e6b03"}, 0x4, {0x2, 0x4e21, @multicast1}, 'syz_tun\x00'}) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 20:04:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:04 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x150) 20:04:04 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000800300000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1867.904573] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 20:04:04 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x4000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1868.077917] xt_l2tp: v2 tid > 0xffff: 131072 20:04:07 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6800, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r4, 0x401, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x8}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000051) r5 = syz_open_dev$audion(&(0x7f0000000600)='/dev/audio#\x00', 0x80, 0x1c882) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000640)={{0x2, 0x4e22, @rand_addr=0x5}, {0x0, @random="b3384a4e6b03"}, 0x4, {0x2, 0x4e21, @multicast1}, 'syz_tun\x00'}) 20:04:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x4800]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:07 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f7680000000000000000008d0300000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:07 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x168) [ 1870.877881] xt_l2tp: v2 tid > 0xffff: 131072 [ 1870.894414] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 20:04:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r4, 0x401, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x8}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000051) syz_open_dev$audion(&(0x7f0000000600)='/dev/audio#\x00', 0x80, 0x1c882) 20:04:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x4c00]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:07 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x180) 20:04:07 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000a00300000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1871.058605] device lo left promiscuous mode [ 1871.078331] device tunl0 left promiscuous mode [ 1871.094427] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1871.096840] device gre0 left promiscuous mode 20:04:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r4, 0x401, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x8}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000051) [ 1871.130193] device gretap0 left promiscuous mode [ 1871.138297] xt_l2tp: v2 tid > 0xffff: 131072 [ 1871.146409] device erspan0 left promiscuous mode [ 1871.156269] device ip_vti0 left promiscuous mode [ 1871.170480] device ip6_vti0 left promiscuous mode [ 1871.182604] device sit0 left promiscuous mode [ 1871.194447] device ip6tnl0 left promiscuous mode [ 1871.217921] device ip6gre0 left promiscuous mode [ 1871.223256] device syz_tun left promiscuous mode [ 1871.238551] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1871.241797] device ip6gretap0 left promiscuous mode [ 1871.252307] device bridge0 left promiscuous mode [ 1871.268853] device vcan0 left promiscuous mode [ 1871.273617] device bond0 left promiscuous mode [ 1871.324680] device team0 left promiscuous mode [ 1871.347900] device dummy0 left promiscuous mode [ 1871.352755] device nlmon0 left promiscuous mode [ 1871.360448] device K left promiscuous mode [ 1871.365646] device batadv0 left promiscuous mode [ 1871.370475] device vxcan0 left promiscuous mode [ 1871.375406] device vxcan1 left promiscuous mode [ 1871.380145] device veth0 left promiscuous mode [ 1871.385196] device veth1 left promiscuous mode [ 1871.389907] device xfrm0 left promiscuous mode [ 1871.394710] device veth0_to_bridge left promiscuous mode [ 1871.400328] device veth1_to_bridge left promiscuous mode [ 1871.406167] device veth0_to_bond left promiscuous mode [ 1871.411520] device bond_slave_0 left promiscuous mode [ 1871.416928] device veth1_to_bond left promiscuous mode [ 1871.422287] device bond_slave_1 left promiscuous mode [ 1871.427689] device veth0_to_team left promiscuous mode [ 1871.433043] device team_slave_0 left promiscuous mode [ 1871.438445] device veth1_to_team left promiscuous mode [ 1871.444028] device team_slave_1 left promiscuous mode [ 1871.444139] device veth0_to_batadv left promiscuous mode [ 1871.454922] device batadv_slave_0 left promiscuous mode [ 1871.460446] device veth1_to_batadv left promiscuous mode [ 1871.466093] device batadv_slave_1 left promiscuous mode [ 1871.471548] device veth0_to_hsr left promiscuous mode [ 1871.477075] device veth1_to_hsr left promiscuous mode [ 1871.482460] device hsr0 left promiscuous mode [ 1871.487143] device veth1_virt_wifi left promiscuous mode [ 1871.492739] device veth0_virt_wifi left promiscuous mode [ 1871.498737] device vlan0 left promiscuous mode [ 1871.503438] device vlan1 left promiscuous mode [ 1871.508183] device macvlan0 left promiscuous mode [ 1871.513112] device macvlan1 left promiscuous mode [ 1871.518169] device ipvlan0 left promiscuous mode [ 1871.523020] device ipvlan1 left promiscuous mode [ 1871.528295] device macvtap0 left promiscuous mode [ 1871.533274] device macsec0 left promiscuous mode [ 1871.538219] device geneve0 left promiscuous mode [ 1871.543098] device geneve1 left promiscuous mode [ 1871.548086] device bond1 left promiscuous mode [ 1871.552765] device bridge_slave_1. left promiscuous mode [ 1871.558428] device bond2 left promiscuous mode 20:04:08 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6c00, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:08 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000be0300000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:08 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x6000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r4, 0x401, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x8}]}, 0x1c}}, 0x0) 20:04:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x198) 20:04:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1871.832923] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1871.844938] xt_l2tp: v2 tid > 0xffff: 131072 20:04:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') 20:04:08 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000c80300000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:08 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x6800]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x1b0) [ 1872.139564] xt_l2tp: v2 tid > 0xffff: 131072 20:04:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socket$nl_generic(0x10, 0x3, 0x10) 20:04:08 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000d00300000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:08 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7400, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:08 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x6c00]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) 20:04:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x1c8) 20:04:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1872.375735] xt_l2tp: v2 tid > 0xffff: 131072 20:04:08 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000e00300000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) 20:04:08 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x7400]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:09 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x1e0) [ 1872.595146] xt_l2tp: v2 tid > 0xffff: 131072 20:04:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 20:04:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:11 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7a00, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:11 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000e80300000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:11 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x7a00]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) 20:04:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1197}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:11 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x1f8) [ 1875.440103] xt_l2tp: v2 tid > 0xffff: 131072 20:04:11 executing program 0: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) 20:04:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:12 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000e90300000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:12 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x8800]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:12 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x210) 20:04:12 executing program 0: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) [ 1875.686548] xt_l2tp: v2 tid > 0xffff: 131072 20:04:12 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xba0e, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:12 executing program 0: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) 20:04:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:12 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000f00300000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:12 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0xf000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:12 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x228) 20:04:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) [ 1875.992418] xt_l2tp: v2 tid > 0xffff: 131072 20:04:12 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x40000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:12 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) 20:04:12 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x240) [ 1876.204513] xt_l2tp: v2 tid > 0xffff: 131072 20:04:12 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000f20300000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:12 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd800, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:12 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) 20:04:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:12 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x1000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:12 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x258) 20:04:12 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1e, 0xa, 0x106, &(0x7f0000000200)}) [ 1876.460495] xt_l2tp: v2 tid > 0xffff: 131072 20:04:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6558}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:12 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000fa0300000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:13 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x2000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, 0x0) 20:04:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:13 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x270) [ 1876.750235] xt_l2tp: v2 tid > 0xffff: 131072 20:04:13 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, 0x0) 20:04:13 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9711}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:13 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x3000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, 0x0) 20:04:13 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x288) 20:04:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1877.096492] xt_l2tp: v2 tid > 0xffff: 131072 20:04:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x0, 0xa, 0x106, &(0x7f0000000200)}) 20:04:13 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000020400000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:13 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x4000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:13 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x2a0) [ 1877.379480] xt_l2tp: v2 tid > 0xffff: 131072 20:04:13 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x106, &(0x7f0000000200)}) 20:04:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:13 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000500000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) 20:04:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x2b8) 20:04:14 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x5000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1877.664654] xt_l2tp: v2 tid > 0xffff: 131072 20:04:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:14 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000600000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x2d0) 20:04:14 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:14 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x6000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:14 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1877.969828] xt_l2tp: v2 tid > 0xffff: 131072 20:04:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x2e8) 20:04:14 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000700000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:14 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x7000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x2, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1878.236849] xt_l2tp: v2 tid > 0xffff: 131072 20:04:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b2f, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:14 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000010a00000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:14 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x300) 20:04:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:14 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0xa000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b30, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1878.531385] xt_l2tp: v2 tid > 0xffff: 131072 20:04:15 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000c00000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:15 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x11000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:15 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x318) 20:04:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b31, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b32, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:15 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:15 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000001100000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:15 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x20000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:15 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x330) 20:04:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b33, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b34, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:15 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x30010000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:15 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000001200000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:15 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x348) 20:04:15 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b35, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:15 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x30020000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:15 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000001400000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x360) 20:04:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b36, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:16 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x38020000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:16 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000001800000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b37, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x65580000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:16 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x378) 20:04:16 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x40000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b3a, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:16 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000001a00000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b3b, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:16 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x48000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x390) 20:04:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x97110000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:16 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000001d00000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:16 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b3c, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:16 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x4c000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:16 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000002300000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x3a8) 20:04:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b3d, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc3ffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:17 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x60000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:17 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000002600000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b40, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:17 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x3c0) 20:04:17 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x68000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b41, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:17 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000002f00000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b44, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1881.080864] l2tp_mt_check: 9 callbacks suppressed [ 1881.080872] xt_l2tp: v2 tid > 0xffff: 131072 20:04:17 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000003000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x3d8) 20:04:17 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x6c000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1881.380321] xt_l2tp: v2 tid > 0xffff: 131072 20:04:17 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b45, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:17 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000003f00000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x3f0) 20:04:17 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x74000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b46, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1881.638410] xt_l2tp: v2 tid > 0xffff: 131072 20:04:18 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000004000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:18 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x408) 20:04:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:18 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x7a000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1881.891321] xt_l2tp: v2 tid > 0xffff: 131072 20:04:18 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x48, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b47, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:18 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000014000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:18 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x88000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:18 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x420) 20:04:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b48, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1882.128508] xt_l2tp: v2 tid > 0xffff: 131072 20:04:18 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000034200000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b49, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20:04:18 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x438) 20:04:18 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4c, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:18 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0xf0000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b4a, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:18 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000034400000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x3}]}, 0x28}}, 0x0) [ 1882.501424] xt_l2tp: v2 tid > 0xffff: 131072 20:04:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b4b, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x450) 20:04:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc}]}, 0x28}}, 0x0) [ 1882.571630] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:19 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000015000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:19 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0xffffff7f]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1882.696018] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b4c, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x25}]}, 0x28}}, 0x0) [ 1882.810249] xt_l2tp: v2 tid > 0xffff: 131072 20:04:19 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x68, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x468) 20:04:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b4d, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:19 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000005300000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:19 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1882.944525] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b4e, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8dc}]}, 0x28}}, 0x0) [ 1883.068783] xt_l2tp: v2 tid > 0xffff: 131072 20:04:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x480) 20:04:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b52, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1883.173735] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:19 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000026000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:19 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x2]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8f0}]}, 0x28}}, 0x0) [ 1883.357396] xt_l2tp: v2 tid > 0xffff: 131072 [ 1883.367915] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:22 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6c, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b60, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8f4}]}, 0x28}}, 0x0) 20:04:22 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x498) 20:04:22 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x3]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:22 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000036200000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b61, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1886.146540] xt_l2tp: v2 tid > 0xffff: 131072 [ 1886.159237] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8fc}]}, 0x28}}, 0x0) 20:04:22 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x4]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:22 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x4b0) 20:04:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x900}]}, 0x28}}, 0x0) 20:04:22 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000006400000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1886.309250] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1886.365510] xt_l2tp: v2 tid > 0xffff: 131072 [ 1886.443399] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:23 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x74, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:23 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x5]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:23 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x4c8) 20:04:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x910}]}, 0x28}}, 0x0) 20:04:23 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000006e00000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b62, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b63, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1886.689377] xt_l2tp: v2 tid > 0xffff: 131072 [ 1886.696924] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x928}]}, 0x28}}, 0x0) 20:04:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b64, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:23 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x4e0) 20:04:23 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000017000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:23 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x6]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1886.862352] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1886.970500] xt_l2tp: v2 tid > 0xffff: 131072 20:04:23 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7a, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x92c}]}, 0x28}}, 0x0) 20:04:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b65, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:23 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000007800000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:23 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x7]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:23 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x4f8) 20:04:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x960}]}, 0x28}}, 0x0) [ 1887.225306] xt_l2tp: v2 tid > 0xffff: 131072 20:04:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b66, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:23 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000038000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x964}]}, 0x28}}, 0x0) 20:04:23 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x510) 20:04:23 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xa]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1887.503284] xt_l2tp: v2 tid > 0xffff: 131072 20:04:24 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xd8, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b67, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x9a4}]}, 0x28}}, 0x0) 20:04:24 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000008800000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:24 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x528) 20:04:24 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x11]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b68, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1887.679450] xt_l2tp: v2 tid > 0xffff: 131072 [ 1887.686265] nla_parse: 3 callbacks suppressed [ 1887.686274] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xb3c}]}, 0x28}}, 0x0) 20:04:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b69, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:24 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000038d00000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:24 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x48]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1887.820764] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:24 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x540) [ 1887.931906] xt_l2tp: v2 tid > 0xffff: 131072 20:04:24 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x300, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xb50}]}, 0x28}}, 0x0) 20:04:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b6a, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:24 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000029000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:24 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x4c]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:24 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x558) [ 1888.211184] xt_l2tp: v2 tid > 0xffff: 131072 20:04:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b6b, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1888.251749] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xb54}]}, 0x28}}, 0x0) 20:04:24 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000009800000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:24 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x570) 20:04:24 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x60]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b6c, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1888.466334] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1888.516163] xt_l2tp: v2 tid > 0xffff: 131072 20:04:25 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x500, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xb5c}]}, 0x28}}, 0x0) 20:04:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b6d, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:25 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f76800000000000000000003a000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:25 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x68]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:25 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x588) 20:04:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b70, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1888.731310] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:25 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x6c]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xb60}]}, 0x28}}, 0x0) 20:04:25 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f76800000000000000000003be00000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b71, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:25 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x5a0) [ 1888.949670] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:25 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x600, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4bfa, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xb70}]}, 0x28}}, 0x0) 20:04:25 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x74]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:25 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f76800000000000000000000c100000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:25 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x5b8) 20:04:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4bfb, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1889.269896] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xb88}]}, 0x28}}, 0x0) 20:04:25 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x7a]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:25 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f76800000000000000000003c800000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5409, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:25 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x5d0) [ 1889.440413] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:26 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x700, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xb8c}]}, 0x28}}, 0x0) 20:04:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x540b, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:26 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f76800000000000000000002d000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:26 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x88]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:26 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x5e8) [ 1889.709314] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x540c, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xbc0}]}, 0x28}}, 0x0) 20:04:26 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xf0]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:26 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f76800000000000000000003d000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x540d, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1889.951530] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:26 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x600) 20:04:26 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa00, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x540e, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xbc4}]}, 0x28}}, 0x0) 20:04:26 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f76800000000000000000001d400000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:26 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x130]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:26 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x618) 20:04:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xbd4}]}, 0x28}}, 0x0) 20:04:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x540f, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:26 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f76800000000000000000000e000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:26 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x230]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xbdc}]}, 0x28}}, 0x0) 20:04:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5410, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:27 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x238]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:27 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x630) 20:04:27 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f76800000000000000000003e000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xbe4}]}, 0x28}}, 0x0) 20:04:27 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xe00, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5412, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xbe8}]}, 0x28}}, 0x0) 20:04:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5413, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:27 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x300]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:27 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f76800000000000000000001e400000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5414, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:27 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x648) 20:04:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xbec}]}, 0x28}}, 0x0) 20:04:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5415, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:27 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x500]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:27 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xeba, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xbf0}]}, 0x28}}, 0x0) 20:04:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5416, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:27 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x660) [ 1891.206921] l2tp_mt_check: 10 callbacks suppressed [ 1891.206929] xt_l2tp: v2 tid > 0xffff: 131072 20:04:27 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f76800000000000000000002e800000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:27 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x600]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xbf4}]}, 0x28}}, 0x0) 20:04:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5418, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:27 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x678) [ 1891.512346] xt_l2tp: v2 tid > 0xffff: 131072 20:04:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x541b, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:28 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f76800000000000000000003e800000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xbf8}]}, 0x28}}, 0x0) 20:04:28 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1f00, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:28 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x700]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x541c, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xbfc}]}, 0x28}}, 0x0) 20:04:28 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f76800000000000000000003e900000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1891.780628] xt_l2tp: v2 tid > 0xffff: 131072 20:04:28 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x690) 20:04:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x541d, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:28 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xa00]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc00}]}, 0x28}}, 0x0) 20:04:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x541e, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:28 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f76800000000000000000001ef00000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1892.089261] xt_l2tp: v2 tid > 0xffff: 131072 20:04:28 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x6a8) 20:04:31 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2000, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5421, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc04}]}, 0x28}}, 0x0) 20:04:31 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x1100]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:31 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f76800000000000000000001f000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:31 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x6c0) 20:04:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5422, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1894.934000] xt_l2tp: v2 tid > 0xffff: 131072 [ 1894.939657] nla_parse: 11 callbacks suppressed [ 1894.939666] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc08}]}, 0x28}}, 0x0) 20:04:31 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x2000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5423, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:31 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x6d8) [ 1895.100612] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:31 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f76800000000000000000003f000000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1895.185817] xt_l2tp: v2 tid > 0xffff: 131072 20:04:31 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3f00, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc0c}]}, 0x28}}, 0x0) 20:04:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5424, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:31 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x3001]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:31 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x6f0) 20:04:31 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f76800000000000000000003f200000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1895.414373] xt_l2tp: v2 tid > 0xffff: 131072 [ 1895.424652] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5425, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc10}]}, 0x28}}, 0x0) 20:04:32 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x3002]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc14}]}, 0x28}}, 0x0) 20:04:32 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x708) 20:04:32 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f76800000000000000000002f800000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1895.594649] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1895.715584] xt_l2tp: v2 tid > 0xffff: 131072 [ 1895.761655] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:32 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4000, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5427, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc18}]}, 0x28}}, 0x0) 20:04:32 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x3802]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:32 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f76800000000000000000003fa00000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:32 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x720) 20:04:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5428, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1895.958573] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1895.968063] xt_l2tp: v2 tid > 0xffff: 131072 20:04:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc1c}]}, 0x28}}, 0x0) 20:04:32 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x4000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5429, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:32 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f76800000000000000000002fc00000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:32 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x738) [ 1896.162729] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1896.177392] xt_l2tp: v2 tid > 0xffff: 131072 20:04:32 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4800, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc20}]}, 0x28}}, 0x0) 20:04:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5437, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:32 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x4800]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1896.392566] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:32 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5441, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc24}]}, 0x28}}, 0x0) 20:04:32 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x750) [ 1896.475871] xt_l2tp: v2 tid > 0xffff: 131072 20:04:33 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x4c00]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5450, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1896.598540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc28}]}, 0x28}}, 0x0) 20:04:33 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f76800000000000000000001fd00000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1896.766847] xt_l2tp: v2 tid > 0xffff: 131072 [ 1896.782027] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:33 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4c00, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:33 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x768) 20:04:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5451, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc2c}]}, 0x28}}, 0x0) 20:04:33 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f76800000000000000000001fe00000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:33 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x6000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5452, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc30}]}, 0x28}}, 0x0) [ 1897.069093] xt_l2tp: v2 tid > 0xffff: 131072 20:04:33 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x780) 20:04:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x545d, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:33 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000002000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:33 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x6800]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1897.303413] xt_l2tp: v2 tid > 0xffff: 131072 20:04:33 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6800, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc34}]}, 0x28}}, 0x0) 20:04:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5460, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:33 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x798) 20:04:33 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000004000000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:33 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x6c00]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5600, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc38}]}, 0x28}}, 0x0) [ 1897.573659] xt_l2tp: v2 tid > 0xffff: 131072 20:04:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5601, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:34 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x7b0) 20:04:34 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000010000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:34 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x7400]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1897.832820] xt_l2tp: v2 tid > 0xffff: 131072 20:04:37 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6c00, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc3c}]}, 0x28}}, 0x0) 20:04:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5602, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:37 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x7a00]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:37 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000020000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:37 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x7c8) [ 1900.620621] nla_parse: 4 callbacks suppressed [ 1900.620631] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1900.637594] xt_l2tp: v2 tid > 0xffff: 131072 20:04:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5603, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc40}]}, 0x28}}, 0x0) 20:04:37 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x8800]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5605, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1900.784048] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:37 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000030000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:37 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x7e0) [ 1900.836052] xt_l2tp: v2 tid > 0xffff: 131072 20:04:37 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7400, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5606, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc44}]}, 0x28}}, 0x0) 20:04:37 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xf000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:37 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000040000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:37 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x7f8) [ 1901.092342] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1901.105683] xt_l2tp: v2 tid > 0xffff: 131072 20:04:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5607, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc48}]}, 0x28}}, 0x0) 20:04:37 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x40000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5608, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:37 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000002040000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1901.293117] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1901.317705] xt_l2tp: v2 tid > 0xffff: 131072 20:04:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc4c}]}, 0x28}}, 0x0) [ 1901.493290] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:40 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7a00, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:40 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x810) 20:04:40 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x1000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x5609, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc50}]}, 0x28}}, 0x0) 20:04:40 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000050000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc54}]}, 0x28}}, 0x0) 20:04:40 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000060000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:40 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x2000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc58}]}, 0x28}}, 0x0) [ 1904.250328] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1904.273856] xt_l2tp: v2 tid > 0xffff: 131072 [ 1904.356821] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:40 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x828) 20:04:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x560a, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1904.502340] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1904.505395] xt_l2tp: v2 tid > 0xffff: 131072 20:04:41 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xba0e, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc5c}]}, 0x28}}, 0x0) 20:04:41 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000070000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x560b, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:41 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x3000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:41 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x840) [ 1904.777316] xt_l2tp: v2 tid > 0xffff: 131072 [ 1904.790469] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc60}]}, 0x28}}, 0x0) 20:04:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x560c, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:41 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f7680000000000000000000000010a0000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:41 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x4000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:41 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x858) [ 1904.988740] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x560d, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1905.032429] xt_l2tp: v2 tid > 0xffff: 131072 20:04:41 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xd800, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc64}]}, 0x28}}, 0x0) 20:04:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x560e, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:41 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x5000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:41 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f7680000000000000000000000000c0000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:41 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x870) [ 1905.335617] xt_l2tp: v2 tid > 0xffff: 131072 20:04:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc68}]}, 0x28}}, 0x0) 20:04:41 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x6000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:41 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000110000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc6c}]}, 0x28}}, 0x0) 20:04:42 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x888) [ 1905.545013] xt_l2tp: v2 tid > 0xffff: 131072 20:04:42 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000120000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:44 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc70}]}, 0x28}}, 0x0) 20:04:44 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x7000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:44 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x8a0) 20:04:44 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000140000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x560f, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x40049409, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1908.476917] xt_l2tp: v2 tid > 0xffff: 131072 [ 1908.491549] nla_parse: 3 callbacks suppressed [ 1908.491618] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:45 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xa000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc74}]}, 0x28}}, 0x0) 20:04:45 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x8b8) 20:04:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x40086602, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1908.628419] xt_l2tp: v2 tid > 0xffff: 131072 20:04:45 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000180000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1908.730924] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:45 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x40087602, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc78}]}, 0x28}}, 0x0) 20:04:45 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x11000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:45 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x8d0) 20:04:45 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f7680000000000000000000000001a0000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4020940d, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1908.951312] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1908.974750] xt_l2tp: v2 tid > 0xffff: 131072 20:04:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc7c}]}, 0x28}}, 0x0) 20:04:45 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x20000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x80045432, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:45 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x8e8) [ 1909.135978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:45 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f7680000000000000000000000001d0000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1909.271579] xt_l2tp: v2 tid > 0xffff: 131072 20:04:48 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc80}]}, 0x28}}, 0x0) 20:04:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x80045440, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:48 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x30010000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:48 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000230000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:48 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x900) 20:04:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x80086601, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1912.087343] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1912.095193] xt_l2tp: v2 tid > 0xffff: 131072 20:04:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc84}]}, 0x28}}, 0x0) 20:04:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x80087601, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:48 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x30020000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:48 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x918) 20:04:48 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000260000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1912.310289] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1912.387278] xt_l2tp: v2 tid > 0xffff: 131072 20:04:51 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0xc0045878, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc88}]}, 0x28}}, 0x0) 20:04:51 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x38020000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:51 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f7680000000000000000000000002f0000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x930) [ 1915.203189] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1915.214142] xt_l2tp: v2 tid > 0xffff: 131072 20:04:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0xc0045878, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc94}]}, 0x28}}, 0x0) 20:04:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0xc0189436, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:51 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000300000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x948) 20:04:51 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x40000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1915.424534] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1915.498454] xt_l2tp: v2 tid > 0xffff: 131072 20:04:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xc9c}]}, 0x28}}, 0x0) 20:04:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0xc020660b, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:04:54 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f7680000000000000000000000003f0000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:54 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x48000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:54 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:54 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x960) [ 1918.341199] xt_l2tp: v2 tid > 0xffff: 131072 20:04:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1918.364938] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xca0}]}, 0x28}}, 0x0) 20:04:54 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x4c000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:54 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x978) 20:04:54 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000400000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1918.517295] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1918.582838] xt_l2tp: v2 tid > 0xffff: 131072 20:04:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xdd4}]}, 0x28}}, 0x0) 20:04:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x3e, 0x0, 0x0, 0x0, 0x0}) 20:04:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x60000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:55 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x990) [ 1918.719897] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:55 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xddc}]}, 0x28}}, 0x0) [ 1918.815207] xt_l2tp: v2 tid > 0xffff: 131072 20:04:55 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000001400000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x3e00, 0x0, 0x0, 0x0, 0x0}) 20:04:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x68000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1918.925001] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x3f00, 0x0, 0x0, 0x0, 0x0}) 20:04:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xe04}]}, 0x28}}, 0x0) 20:04:55 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x9a8) [ 1919.066755] xt_l2tp: v2 tid > 0xffff: 131072 20:04:55 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000003420000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x1000000, 0x0, 0x0, 0x0, 0x0}) [ 1919.127774] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x6c000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x3e000000, 0x0, 0x0, 0x0, 0x0}) [ 1919.292581] xt_l2tp: v2 tid > 0xffff: 131072 20:04:58 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xe08}]}, 0x28}}, 0x0) 20:04:58 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x9c0) 20:04:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x3f000000, 0x0, 0x0, 0x0, 0x0}) 20:04:58 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000003440000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x74000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1922.016500] xt_l2tp: v2 tid > 0xffff: 131072 [ 1922.019076] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xe0c}]}, 0x28}}, 0x0) 20:04:58 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000001500000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:58 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x9d8) 20:04:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x3e, 0x0, 0x0, 0x0}) 20:04:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x7a000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1922.161294] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1922.318753] xt_l2tp: v2 tid > 0xffff: 131072 20:04:58 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xa}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xe10}]}, 0x28}}, 0x0) 20:04:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x3e00, 0x0, 0x0, 0x0}) 20:04:58 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000530000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x88000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:58 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0x9f0) 20:04:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x3f00, 0x0, 0x0, 0x0}) [ 1922.563485] xt_l2tp: v2 tid > 0xffff: 131072 [ 1922.568992] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xe14}]}, 0x28}}, 0x0) 20:04:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xf0000000]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x1000000, 0x0, 0x0, 0x0}) 20:04:59 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000002600000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:59 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0xa08) [ 1922.763423] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1922.785383] xt_l2tp: v2 tid > 0xffff: 131072 20:04:59 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xe}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x3e000000, 0x0, 0x0, 0x0}) 20:04:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xe18}]}, 0x28}}, 0x0) 20:04:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0xffffff7f]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:59 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000003620000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:59 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0xa20) 20:04:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x3f000000, 0x0, 0x0, 0x0}) [ 1923.039924] xt_l2tp: v2 tid > 0xffff: 131072 [ 1923.046436] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xe1c}]}, 0x28}}, 0x0) 20:04:59 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000640000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:59 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0xa38) 20:04:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1923.299554] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:04:59 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x48}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:04:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xe20}]}, 0x28}}, 0x0) 20:04:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x3e, 0x0, 0x0}) 20:04:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x2]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:04:59 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f7680000000000000000000000006e0000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:04:59 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0xa50) 20:05:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x3e00, 0x0, 0x0}) [ 1923.561169] l2tp_mt_check: 1 callbacks suppressed [ 1923.561176] xt_l2tp: v2 tid > 0xffff: 131072 [ 1923.582440] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:05:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xe24}]}, 0x28}}, 0x0) 20:05:00 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:05:00 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0xa68) 20:05:00 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000001700000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:05:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x3f00, 0x0, 0x0}) [ 1923.757209] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1923.811169] xt_l2tp: v2 tid > 0xffff: 131072 20:05:00 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4c}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:05:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xe30}]}, 0x28}}, 0x0) 20:05:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x1000000, 0x0, 0x0}) 20:05:00 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:05:00 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0xa80) 20:05:00 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000780000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1924.003602] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1924.025655] xt_l2tp: v2 tid > 0xffff: 131072 20:05:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x3e000000, 0x0, 0x0}) 20:05:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xe34}]}, 0x28}}, 0x0) 20:05:00 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x5]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:05:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x3f000000, 0x0, 0x0}) 20:05:00 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0xa98) 20:05:00 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000003800000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1924.247422] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1924.253587] xt_l2tp: v2 tid > 0xffff: 131072 20:05:03 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x68}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:05:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xe38}]}, 0x28}}, 0x0) 20:05:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:05:03 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x6]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:05:03 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000880000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:05:03 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0xab0) 20:05:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x3e, 0x0}) [ 1927.142255] xt_l2tp: v2 tid > 0xffff: 131072 [ 1927.148821] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:05:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xe3c}]}, 0x28}}, 0x0) 20:05:03 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f7680000000000000000000000038d0000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:05:03 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x7]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1927.284309] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:05:03 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0xac8) 20:05:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xe40}]}, 0x28}}, 0x0) [ 1927.439462] xt_l2tp: v2 tid > 0xffff: 131072 [ 1927.454637] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:05:06 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6c}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:05:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x3e00, 0x0}) 20:05:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xe44}]}, 0x28}}, 0x0) 20:05:06 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000002900000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:05:06 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0xa]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:05:06 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0xae0) [ 1930.268096] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1930.269758] xt_l2tp: v2 tid > 0xffff: 131072 20:05:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xe48}]}, 0x28}}, 0x0) 20:05:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x3f00, 0x0}) 20:05:06 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000980000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1930.363479] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:05:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xe4c}]}, 0x28}}, 0x0) 20:05:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x1000000, 0x0}) 20:05:06 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x11]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1930.543286] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1930.584570] xt_l2tp: v2 tid > 0xffff: 131072 20:05:07 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x74}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:05:07 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0xaf8) 20:05:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x3e000000, 0x0}) 20:05:07 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000003a00000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:05:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xe50}]}, 0x28}}, 0x0) 20:05:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x48]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1930.721091] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:05:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x3f000000, 0x0}) 20:05:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xe54}]}, 0x28}}, 0x0) [ 1930.828557] xt_l2tp: v2 tid > 0xffff: 131072 20:05:07 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0xb10) 20:05:07 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000003be0000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1930.912755] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:05:07 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000001c0)={0x1, 0x102, 0x4, {0x1, 0x8, 0x1, 0xffffffe0}}) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0xfffffffc, 0xe, 0xf5, 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', 0x0}) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040)) 20:05:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xe58}]}, 0x28}}, 0x0) [ 1931.069145] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:05:07 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7a}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 20:05:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x4c]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:05:07 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0xb28) 20:05:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xe5c}]}, 0x28}}, 0x0) 20:05:07 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000c10000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1931.191646] xt_l2tp: v2 tid > 0xffff: 131072 20:05:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x80000001) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x2, 0x0, 0x0, 0x0}) [ 1931.215993] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:05:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x130, 0x0, 0x130, 0x0, 0x130, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x20000, 0x0, 0x2, 0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x60]}}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:05:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xe60}]}, 0x28}}, 0x0) 20:05:07 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x121041) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0xa6c, [0x20001d80, 0x0, 0x0, 0x2000278c, 0x200027bc], 0x0, 0x0, &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'ip6tnl0\x00', 'tunl0\x00', 'lo\x00', 'veth1_to_bond\x00', @broadcast, [], @random="cd9f8e52b79a", [], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@link_local}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast}}}}, {0x0, 0x0, 0x0, 'lo\x00', 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', 'ip6tnl0\x00', @remote, [], @empty, [], 0x8c6, 0x8c6, 0x8fe, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'ip6gre0\x00'}}}, @u32={{'u32\x00', 0x0, 0x7c0}}], [], @snat={'snat\x00', 0x10}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0xae4) write$evdev(r0, &(0x7f0000000040), 0xb40) 20:05:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0xe64}]}, 0x28}}, 0x0) 20:05:07 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000003c80000000000000000000000000200000003000000d8010000980000000000000098000000980000000000000040010000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600000000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1931.445454] xt_l2tp: v2 tid > 0xffff: 131072 20:05:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1931.568026] ================================================================== [ 1931.568077] BUG: KASAN: slab-out-of-bounds in soft_cursor+0x448/0xa20 [ 1931.568091] Read of size 16 at addr ffff88804971bd10 by task syz-executor.0/7586 [ 1931.568094] [ 1931.568117] CPU: 1 PID: 7586 Comm: syz-executor.0 Not tainted 4.19.110-syzkaller #0 [ 1931.568130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1931.568135] Call Trace: [ 1931.568153] dump_stack+0x188/0x20d [ 1931.568170] ? soft_cursor+0x448/0xa20 [ 1931.568188] print_address_description.cold+0x7c/0x212 [ 1931.568205] ? soft_cursor+0x448/0xa20 [ 1931.568219] kasan_report.cold+0x88/0x2b9 [ 1931.568235] memcpy+0x20/0x50 [ 1931.568252] soft_cursor+0x448/0xa20 [ 1931.568278] bit_cursor+0x1230/0x1900 [ 1931.568301] ? bit_clear+0x4e0/0x4e0 [ 1931.568321] ? __lock_acquire+0x681/0x49c0 [ 1931.568336] ? fb_get_color_depth.part.0+0xc6/0x1f0 [ 1931.568353] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1931.568368] ? get_color+0x20f/0x420 [ 1931.568395] fbcon_cursor+0x572/0x760 [ 1931.568409] ? bit_clear+0x4e0/0x4e0 [ 1931.568426] hide_cursor+0x99/0x2f0 [ 1931.568443] redraw_screen+0x2ed/0x870 [ 1931.568461] ? con_flush_chars+0x90/0x90 [ 1931.568477] ? console_lock+0x25/0x80 [ 1931.568498] fbcon_do_set_font+0x727/0xa30 [ 1931.568519] ? fbcon_do_set_font+0xa30/0xa30 [ 1931.568533] fbcon_copy_font+0x125/0x190 [ 1931.568550] con_font_op+0x63f/0x1130 [ 1931.568569] ? con_write+0xe0/0xe0 [ 1931.568582] ? lock_downgrade+0x740/0x740 [ 1931.568608] ? __might_fault+0x192/0x1d0 [ 1931.568628] vt_ioctl+0x1615/0x2310 [ 1931.568647] ? complete_change_console+0x390/0x390 [ 1931.568660] ? avc_has_extended_perms+0x9c6/0x1030 [ 1931.568686] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1931.568703] ? complete_change_console+0x390/0x390 [ 1931.568720] tty_ioctl+0x7a1/0x1420 [ 1931.568735] ? tty_vhangup+0x30/0x30 [ 1931.568750] ? mark_held_locks+0xf0/0xf0 [ 1931.568768] ? mark_held_locks+0xf0/0xf0 [ 1931.568780] ? find_held_lock+0x2d/0x110 [ 1931.568798] ? debug_check_no_obj_freed+0x20a/0x42e [ 1931.568820] ? tty_vhangup+0x30/0x30 [ 1931.568835] do_vfs_ioctl+0xcda/0x12e0 [ 1931.568851] ? selinux_file_ioctl+0x46c/0x5d0 [ 1931.568866] ? selinux_file_ioctl+0x125/0x5d0 [ 1931.568882] ? check_preemption_disabled+0x41/0x280 [ 1931.568896] ? ioctl_preallocate+0x200/0x200 [ 1931.568914] ? selinux_file_mprotect+0x600/0x600 [ 1931.568929] ? __fget+0x340/0x510 [ 1931.568947] ? iterate_fd+0x350/0x350 [ 1931.568969] ? security_file_ioctl+0x6c/0xb0 [ 1931.568984] ksys_ioctl+0x9b/0xc0 [ 1931.568999] __x64_sys_ioctl+0x6f/0xb0 [ 1931.569012] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 1931.569032] do_syscall_64+0xf9/0x620 [ 1931.569051] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1931.569063] RIP: 0033:0x45c849 [ 1931.569078] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1931.569086] RSP: 002b:00007fb658e40c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1931.569100] RAX: ffffffffffffffda RBX: 00007fb658e416d4 RCX: 000000000045c849 [ 1931.569108] RDX: 0000000020000180 RSI: 0000000000004b72 RDI: 0000000000000003 [ 1931.569117] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1931.569125] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1931.569133] R13: 000000000000036b R14: 00000000004c5dc7 R15: 000000000076bf0c [ 1931.569152] [ 1931.569158] Allocated by task 9935: [ 1931.569174] kasan_kmalloc+0xbf/0xe0 [ 1931.569185] __kmalloc+0x15b/0x770 [ 1931.569199] fbcon_set_font+0x331/0x870 [ 1931.569213] con_font_op+0xd3e/0x1130 [ 1931.569225] vt_ioctl+0xc6c/0x2310 [ 1931.569237] tty_ioctl+0x7a1/0x1420 [ 1931.569247] do_vfs_ioctl+0xcda/0x12e0 [ 1931.569257] ksys_ioctl+0x9b/0xc0 [ 1931.569267] __x64_sys_ioctl+0x6f/0xb0 [ 1931.569280] do_syscall_64+0xf9/0x620 [ 1931.569292] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1931.569295] [ 1931.569301] Freed by task 11654: [ 1931.569313] __kasan_slab_free+0xf7/0x140 [ 1931.569323] kfree+0xce/0x220 [ 1931.569336] skb_free_head+0x91/0xb0 [ 1931.569347] skb_release_data+0x600/0x8c0 [ 1931.569357] skb_release_all+0x46/0x60 [ 1931.569367] consume_skb+0xda/0x380 [ 1931.569379] skb_free_datagram+0x16/0xf0 [ 1931.569400] netlink_recvmsg+0x667/0xea0 [ 1931.569415] sock_recvmsg+0xca/0x110 [ 1931.569426] ___sys_recvmsg+0x271/0x580 [ 1931.569436] __sys_recvmsg+0xe9/0x1b0 [ 1931.569449] do_syscall_64+0xf9/0x620 [ 1931.569462] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1931.569465] [ 1931.569475] The buggy address belongs to the object at ffff88804971bb00 [ 1931.569475] which belongs to the cache kmalloc-1024 of size 1024 [ 1931.569487] The buggy address is located 528 bytes inside of [ 1931.569487] 1024-byte region [ffff88804971bb00, ffff88804971bf00) [ 1931.569492] The buggy address belongs to the page: [ 1931.569504] page:ffffea000125c680 count:1 mapcount:0 mapping:ffff88812c3dcac0 index:0xffff88804971b680 compound_mapcount: 0 [ 1931.569517] flags: 0xfffe0000008100(slab|head) [ 1931.569536] raw: 00fffe0000008100 ffffea000278ec08 ffffea0002a36e88 ffff88812c3dcac0 [ 1931.569550] raw: ffff88804971b680 ffff88804971a000 0000000100000003 0000000000000000 [ 1931.569556] page dumped because: kasan: bad access detected [ 1931.569559] [ 1931.569563] Memory state around the buggy address: [ 1931.569572] ffff88804971bc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1931.569582] ffff88804971bc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1931.569592] >ffff88804971bd00: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1931.569596] ^ [ 1931.569605] ffff88804971bd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1931.569615] ffff88804971be00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1931.569620] ================================================================== [ 1931.569624] Disabling lock debugging due to kernel taint [ 1931.572643] Kernel panic - not syncing: panic_on_warn set ... [ 1931.572643] [ 1931.572660] CPU: 1 PID: 7586 Comm: syz-executor.0 Tainted: G B 4.19.110-syzkaller #0 [ 1931.572667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1931.572671] Call Trace: [ 1931.572690] dump_stack+0x188/0x20d [ 1931.572709] panic+0x26a/0x50e [ 1931.572725] ? __warn_printk+0xf3/0xf3 [ 1931.572743] ? preempt_schedule_common+0x4a/0xc0 [ 1931.572757] ? soft_cursor+0x448/0xa20 [ 1931.572772] ? ___preempt_schedule+0x16/0x18 [ 1931.572786] ? trace_hardirqs_on+0x55/0x210 [ 1931.572800] ? soft_cursor+0x448/0xa20 [ 1931.572815] kasan_end_report+0x43/0x49 [ 1931.572828] kasan_report.cold+0xa4/0x2b9 [ 1931.572843] memcpy+0x20/0x50 [ 1931.572858] soft_cursor+0x448/0xa20 [ 1931.572878] bit_cursor+0x1230/0x1900 [ 1931.572894] ? bit_clear+0x4e0/0x4e0 [ 1931.572911] ? __lock_acquire+0x681/0x49c0 [ 1931.572924] ? fb_get_color_depth.part.0+0xc6/0x1f0 [ 1931.572937] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1931.572950] ? get_color+0x20f/0x420 [ 1931.572964] fbcon_cursor+0x572/0x760 [ 1931.572976] ? bit_clear+0x4e0/0x4e0 [ 1931.572991] hide_cursor+0x99/0x2f0 [ 1931.573005] redraw_screen+0x2ed/0x870 [ 1931.573020] ? con_flush_chars+0x90/0x90 [ 1931.573035] ? console_lock+0x25/0x80 [ 1931.573053] fbcon_do_set_font+0x727/0xa30 [ 1931.573070] ? fbcon_do_set_font+0xa30/0xa30 [ 1931.573083] fbcon_copy_font+0x125/0x190 [ 1931.573097] con_font_op+0x63f/0x1130 [ 1931.573112] ? con_write+0xe0/0xe0 [ 1931.573125] ? lock_downgrade+0x740/0x740 [ 1931.573144] ? __might_fault+0x192/0x1d0 [ 1931.573160] vt_ioctl+0x1615/0x2310 [ 1931.573177] ? complete_change_console+0x390/0x390 [ 1931.573201] ? avc_has_extended_perms+0x9c6/0x1030 [ 1931.573221] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1931.573237] ? complete_change_console+0x390/0x390 [ 1931.573254] tty_ioctl+0x7a1/0x1420 [ 1931.573279] ? tty_vhangup+0x30/0x30 [ 1931.573294] ? mark_held_locks+0xf0/0xf0 [ 1931.573310] ? mark_held_locks+0xf0/0xf0 [ 1931.573323] ? find_held_lock+0x2d/0x110 [ 1931.573340] ? debug_check_no_obj_freed+0x20a/0x42e [ 1931.573358] ? tty_vhangup+0x30/0x30 [ 1931.573372] do_vfs_ioctl+0xcda/0x12e0 [ 1931.573402] ? selinux_file_ioctl+0x46c/0x5d0 [ 1931.573417] ? selinux_file_ioctl+0x125/0x5d0 [ 1931.573435] ? check_preemption_disabled+0x41/0x280 [ 1931.573448] ? ioctl_preallocate+0x200/0x200 [ 1931.573470] ? selinux_file_mprotect+0x600/0x600 [ 1931.573490] ? __fget+0x340/0x510 [ 1931.573510] ? iterate_fd+0x350/0x350 [ 1931.573528] ? security_file_ioctl+0x6c/0xb0 [ 1931.573542] ksys_ioctl+0x9b/0xc0 [ 1931.573556] __x64_sys_ioctl+0x6f/0xb0 [ 1931.573574] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 1931.573589] do_syscall_64+0xf9/0x620 [ 1931.573605] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1931.573614] RIP: 0033:0x45c849 [ 1931.573643] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1931.573653] RSP: 002b:00007fb658e40c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1931.573672] RAX: ffffffffffffffda RBX: 00007fb658e416d4 RCX: 000000000045c849 [ 1931.573681] RDX: 0000000020000180 RSI: 0000000000004b72 RDI: 0000000000000003 [ 1931.573696] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1931.573704] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1931.573712] R13: 000000000000036b R14: 00000000004c5dc7 R15: 000000000076bf0c [ 1931.575079] Kernel Offset: disabled [ 1932.474799] Rebooting in 86400 seconds..